[dns-operations] July 2018 DNSSEC stats
Viktor Dukhovni
ietf-dane at dukhovni.org
Tue Jul 31 23:11:22 UTC 2018
The July numbers from the DANE/DNSSEC survey are:
Total DS RRsets: 8,622,502
Validatable apex DNSKEY RRsets: 8,487,317
DNSKEY parameter frequency (1000 or more instances), by zone count:
kskalgs | flags | proto | alg
--------+-------+-------+-----
4849 | 257 | 3 | 3
352498 | 257 | 3 | 5
2206777 | 257 | 3 | 7
4141862 | 257 | 3 | 8
78205 | 257 | 3 | 10
1639709 | 257 | 3 | 13
62891 | 257 | 3 | 14
zskalgs | flags | proto | alg
--------+-------+-------+-----
4849 | 256 | 3 | 3
135594 | 256 | 3 | 5
2197424 | 256 | 3 | 7
4075009 | 256 | 3 | 8
78001 | 256 | 3 | 10
770602 | 256 | 3 | 13
61938 | 256 | 3 | 14
RSA key size distribution (1000 or more instances), by zone count:
kskdomains | bits
-----------+------
68089 | 4096
5082274 | 2048
300341 | 1536
2510 | 1280
1464348 | 1024
15647 | 512
zskdomains | bits
-----------+------
13059 | 4096
93246 | 2048
304966 | 1280
6058474 | 1024
15818 | 512
DNSKEY lookup failure rates (whether bogus, or just lame
delegation, ...) by TLD with 1000 or more signed delegations:
TLD failed-DS total-DS %fail
-------------+----------+-----------+------
br | 183 | 485282 | 0.04
app | 32 | 32309 | 0.10
hk | 11 | 6028 | 0.18
mx | 29 | 16255 | 0.18
re | 8 | 3578 | 0.22
art | 4 | 1559 | 0.26
immo | 5 | 1719 | 0.29
ovh | 67 | 22367 | 0.30
is | 5 | 1180 | 0.42
bzh | 8 | 1469 | 0.54
de | 448 | 82807 | 0.54
shop | 39 | 6785 | 0.57
paris | 18 | 2873 | 0.63
world | 10 | 1582 | 0.63
no | 2417 | 377096 | 0.64
nl | 20235 | 3050979 | 0.66
hu | 883 | 118401 | 0.75
eu | 4094 | 483200 | 0.85
pl | 2916 | 338508 | 0.86
fr | 4358 | 418237 | 1.04
cz | 6488 | 594773 | 1.09
be | 1606 | 144513 | 1.11
gov | 13 | 1168 | 1.11
fi | 33 | 2896 | 1.14
ee | 16 | 1386 | 1.15
agency | 12 | 1011 | 1.19
biz | 243 | 19136 | 1.27
cloud | 36 | 2820 | 1.28
ch | 477 | 35827 | 1.33
online | 90 | 6788 | 1.33
tv | 40 | 3004 | 1.33
tech | 48 | 3405 | 1.41
info | 535 | 37244 | 1.44
pt | 205 | 13545 | 1.51
mobi | 16 | 1055 | 1.52
org | 1520 | 95168 | 1.60
me | 166 | 8915 | 1.86
store | 44 | 2358 | 1.87
kr | 70 | 3630 | 1.93
net | 2579 | 127439 | 2.02
cc | 23 | 1089 | 2.11
io | 270 | 12790 | 2.11
us | 154 | 6516 | 2.36
dk | 554 | 23180 | 2.39
at | 141 | 5864 | 2.40
com | 22076 | 909306 | 2.43
club | 44 | 1780 | 2.47
email | 48 | 1805 | 2.66
amsterdam | 141 | 4564 | 3.09
space | 37 | 1170 | 3.16
uk | 1018 | 31848 | 3.20
xyz | 238 | 6858 | 3.47
ca | 71 | 1997 | 3.56
es | 508 | 12638 | 4.02
co | 211 | 5120 | 4.12
au | 54 | 1166 | 4.63
lv | 169 | 3588 | 4.71
frl | 208 | 3943 | 5.28
se | 45232 | 816264 | 5.54
site | 67 | 1039 | 6.45
nu | 9371 | 129405 | 7.24
in | 167 | 2290 | 7.29
nrw | 288 | 2508 | 11.48
ru | 342 | 2251 | 15.19
bank | 1149 | 2720 | 42.24
--
Viktor.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20180731/da0f93bc/attachment.html>
More information about the dns-operations
mailing list