[dns-operations] July 2018 DNSSEC stats (update: nearly 50% drop in 512-bit RSA keys)

Viktor Dukhovni ietf-dane at dukhovni.org
Sat Aug 11 18:02:05 UTC 2018


Thanks to just completed upgrades at mijnhostingpartner.nl, the
number of observed 512-bit RSA keys has dropped by nearly 50%:

> On Jul 31, 2018, at 7:11 PM, Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
> 
> RSA key size distribution (1000 or more instances), by zone count:
> 
>  kskdomains | bits 
>  -----------+------
>         ...
>       15647 |  512

Now:

 kskdomains | bits
------------+------
        ...
       8680 |  512

>  zskdomains | bits 
>  -----------+------
>         ...
>       15818 |  512

Now:

 zskdomains | bits
------------+------
        ...
       8853 |  512

With a bit of look the handful of remaining providers that
contribute to the above above counts will soon take similar
action.

-- 
	Viktor.





More information about the dns-operations mailing list