Both the terms “Protected” and “Not Protected” is an attempt by MYNIC to summarize the status of DNSSEC for the domain name. A domain is marked as “Protected” when there is at least 1 KSK that is “Published” (or during “Pending Unpublish”). “Not Protected” is for domain names that either have not loaded the keys into the system or that all the keys are set to “Unpublished” (or still “Pending Publish”) status. By default, when a domain name is first enabled with DNSSEC, the status is “Not Protected”.
