[dns-operations] A Case Against DNSSEC (A Matasano Miniseries)

Matt Larson mlarson at verisign.com
Wed Apr 4 21:29:46 UTC 2007

On Wed, 04 Apr 2007, Paul Vixie wrote:
> > Am I missing something here?  Do 75% of the world's Internet users (to 
> > take a number from another of Rodney's message) really use less than 30 
> > recursive DNS servers?
> that sounds about right.

Has somebody got data showing this?  My anecdotal experience indicates
otherwise.  It's been about three years, but one time I counted unique
source IP addresses received by a.gtld-servers.net--just one out of 13
.com/.net servers--and saw 1.9 million unique addresses in a 24-hour
window.  Another data point is our recent J root traffic analysis,
which looked at a 26-hour window in late October 2006 and showed
859,784 unique source IP addresses across 335,259,322 total queries.
(The presentation is available at

But I'm sufficiently intrigued to put my data where my mouth is--I'll
do some additional analysis about distribution of queries across
addresses and get back to the list.


More information about the dns-operations mailing list