[dns-operations] July 2018 DNSSEC stats

Viktor Dukhovni ietf-dane at dukhovni.org
Tue Jul 31 23:11:22 UTC 2018


The July numbers from the DANE/DNSSEC survey are:

Total DS RRsets:                8,622,502
Validatable apex DNSKEY RRsets: 8,487,317

DNSKEY parameter frequency (1000 or more instances), by zone count:

 kskalgs | flags | proto | alg 
 --------+-------+-------+-----
    4849 |   257 |     3 |   3
  352498 |   257 |     3 |   5
 2206777 |   257 |     3 |   7
 4141862 |   257 |     3 |   8
   78205 |   257 |     3 |  10
 1639709 |   257 |     3 |  13
   62891 |   257 |     3 |  14

 zskalgs | flags | proto | alg 
 --------+-------+-------+-----
    4849 |   256 |     3 |   3
  135594 |   256 |     3 |   5
 2197424 |   256 |     3 |   7
 4075009 |   256 |     3 |   8
   78001 |   256 |     3 |  10
  770602 |   256 |     3 |  13
   61938 |   256 |     3 |  14

RSA key size distribution (1000 or more instances), by zone count:

 kskdomains | bits 
 -----------+------
      68089 | 4096
    5082274 | 2048
     300341 | 1536
       2510 | 1280
    1464348 | 1024
      15647 |  512

 zskdomains | bits 
 -----------+------
      13059 | 4096
      93246 | 2048
     304966 | 1280
    6058474 | 1024
      15818 |  512

DNSKEY lookup failure rates (whether bogus, or just lame
delegation, ...) by TLD with 1000 or more signed delegations:

TLD           failed-DS    total-DS   %fail
-------------+----------+-----------+------
br           |      183 |    485282 |  0.04
app          |       32 |     32309 |  0.10
hk           |       11 |      6028 |  0.18
mx           |       29 |     16255 |  0.18
re           |        8 |      3578 |  0.22
art          |        4 |      1559 |  0.26
immo         |        5 |      1719 |  0.29
ovh          |       67 |     22367 |  0.30
is           |        5 |      1180 |  0.42
bzh          |        8 |      1469 |  0.54
de           |      448 |     82807 |  0.54
shop         |       39 |      6785 |  0.57
paris        |       18 |      2873 |  0.63
world        |       10 |      1582 |  0.63
no           |     2417 |    377096 |  0.64
nl           |    20235 |   3050979 |  0.66
hu           |      883 |    118401 |  0.75
eu           |     4094 |    483200 |  0.85
pl           |     2916 |    338508 |  0.86
fr           |     4358 |    418237 |  1.04
cz           |     6488 |    594773 |  1.09
be           |     1606 |    144513 |  1.11
gov          |       13 |      1168 |  1.11
fi           |       33 |      2896 |  1.14
ee           |       16 |      1386 |  1.15
agency       |       12 |      1011 |  1.19
biz          |      243 |     19136 |  1.27
cloud        |       36 |      2820 |  1.28
ch           |      477 |     35827 |  1.33
online       |       90 |      6788 |  1.33
tv           |       40 |      3004 |  1.33
tech         |       48 |      3405 |  1.41
info         |      535 |     37244 |  1.44
pt           |      205 |     13545 |  1.51
mobi         |       16 |      1055 |  1.52
org          |     1520 |     95168 |  1.60
me           |      166 |      8915 |  1.86
store        |       44 |      2358 |  1.87
kr           |       70 |      3630 |  1.93
net          |     2579 |    127439 |  2.02
cc           |       23 |      1089 |  2.11
io           |      270 |     12790 |  2.11
us           |      154 |      6516 |  2.36
dk           |      554 |     23180 |  2.39
at           |      141 |      5864 |  2.40
com          |    22076 |    909306 |  2.43
club         |       44 |      1780 |  2.47
email        |       48 |      1805 |  2.66
amsterdam    |      141 |      4564 |  3.09
space        |       37 |      1170 |  3.16
uk           |     1018 |     31848 |  3.20
xyz          |      238 |      6858 |  3.47
ca           |       71 |      1997 |  3.56
es           |      508 |     12638 |  4.02
co           |      211 |      5120 |  4.12
au           |       54 |      1166 |  4.63
lv           |      169 |      3588 |  4.71
frl          |      208 |      3943 |  5.28
se           |    45232 |    816264 |  5.54
site         |       67 |      1039 |  6.45
nu           |     9371 |    129405 |  7.24
in           |      167 |      2290 |  7.29
nrw          |      288 |      2508 | 11.48
ru           |      342 |      2251 | 15.19
bank         |     1149 |      2720 | 42.24

-- 
	Viktor.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20180731/da0f93bc/attachment.html>


More information about the dns-operations mailing list