[dns-operations] signing a zone with NSEC3 records.

[David Conrad]

Olaf,

On Sep 11, 2009, at 12:32 PM, Olaf Kolkman wrote:
> On Sep 11, 2009, at 6:49 PM, David Conrad wrote:
>> Only 30% of the queries reaching the root have DO=0 (and by  
>> implication any authority) at this point in time.
>
> When I looked at this when working on RIPE352 (http://www.ripe.net/docs/ripe-352.html 
>  see figure 2) this was not true.

RIPE 352 was published 4 years ago, right?  The 60-70% DO=1 stats are  
current as of about 5 minutes ago on the "L" root server.  My guess  
would be that a lot of folks have upgraded their resolvers as a result  
of the stuff Kaminsky's published.

Regards,
-drc