[dns-operations] signing a zone with NSEC3 records.

[John L. Crain]

Stats are available for those who want to track:

http://stats.l.root-servers.org/cgi-bin/dsc-grapher.pl?window=86400&plot=do_bit&server=L-root&yaxis=percent


I do recall seeing a marked improvement in the weeks after the  
announcement of Dan's findings.


John


On Sep 11, 2009, at 1:13 PM, David Conrad wrote:

> Olaf,
>
> On Sep 11, 2009, at 12:32 PM, Olaf Kolkman wrote:
>> On Sep 11, 2009, at 6:49 PM, David Conrad wrote:
>>> Only 30% of the queries reaching the root have DO=0 (and by
>>> implication any authority) at this point in time.
>>
>> When I looked at this when working on RIPE352 (http://www.ripe.net/docs/ripe-352.html
>> see figure 2) this was not true.
>
> RIPE 352 was published 4 years ago, right?  The 60-70% DO=1 stats are
> current as of about 5 minutes ago on the "L" root server.  My guess
> would be that a lot of folks have upgraded their resolvers as a result
> of the stuff Kaminsky's published.
>
> Regards,
> -drc
>
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations