[dns-operations] Update: DNSSEC stats

[Viktor Dukhovni]

We're close enough to the end of June, the updated numbers from the DANE/DNSSEC survey are:

Total DS RRsets:                8,002,651
Validatable apex DNSKEY RRsets: 7,874,608

DNSKEY parameter frequency (1000 or more instances), by zone count:

     kskalgs | flags | proto | alg 
     --------+-------+-------+-----
        4857 |   257 |     3 |   3
      353579 |   257 |     3 |   5
     2102025 |   257 |     3 |   7
     3709154 |   257 |     3 |   8
       77038 |   257 |     3 |  10
     1565443 |   257 |     3 |  13
       63004 |   257 |     3 |  14

     zskalgs | flags | proto | alg 
     --------+-------+-------+-----
        4857 |   256 |     3 |   3
      136884 |   256 |     3 |   5
     2094144 |   256 |     3 |   7
     3654046 |   256 |     3 |   8
       76912 |   256 |     3 |  10
      767374 |   256 |     3 |  13
       62127 |   256 |     3 |  14

RSA key size distribution (1000 or more instances), by zone count:

     kskdomains | bits 
     -----------+------
          66366 | 4096
        4401170 | 2048
         291748 | 1536
           2196 | 1280
        1474501 | 1024
          14665 |  512

     zskdomains | bits 
     -----------+------
          12999 | 4096
          89242 | 2048
         296330 | 1280
        5548240 | 1024
          14836 |  512

DNSKEY lookup failure rates (whether bogus, or just lame
delegation, ...) by TLD with 1000 or more signed delegations:

TLD           failed-DS    total-DS   %fail
-------------+----------+-----------+------
br           |      173 |    496276 |  0.03
app          |       16 |     29714 |  0.05
hk           |        9 |      6043 |  0.15
mx           |       31 |     16675 |  0.19
re           |        8 |      3572 |  0.22
ovh          |       54 |     22632 |  0.24
immo         |        5 |      1670 |  0.30
is           |        4 |      1182 |  0.34
art          |        6 |      1483 |  0.40
bzh          |        7 |      1436 |  0.49
shop         |       36 |      6633 |  0.54
de           |      452 |     80946 |  0.56
paris        |       16 |      2851 |  0.56
nl           |    14858 |   2483890 |  0.60
world        |       10 |      1605 |  0.62
hu           |      811 |    117043 |  0.69
pl           |     2031 |    292305 |  0.69
no           |     2755 |    379700 |  0.73
ee           |       10 |      1338 |  0.75
eu           |     3869 |    483529 |  0.80
be           |     1420 |    144201 |  0.98
cz           |     6465 |    596072 |  1.08
ch           |      400 |     36022 |  1.11
fi           |       33 |      2807 |  1.18
fr           |     5107 |    422808 |  1.21
biz          |      241 |     18923 |  1.27
tech         |       44 |      3299 |  1.33
online       |       88 |      6583 |  1.34
info         |      500 |     36967 |  1.35
tv           |       41 |      3036 |  1.35
cloud        |       37 |      2692 |  1.37
org          |     1431 |     93773 |  1.53
gov          |       18 |      1170 |  1.54
pt           |      217 |     13794 |  1.57
mobi         |       16 |      1013 |  1.58
cc           |       18 |      1052 |  1.71
kr           |       64 |      3722 |  1.72
me           |      156 |      8771 |  1.78
store        |       44 |      2325 |  1.89
net          |     2487 |    126265 |  1.97
at           |      115 |      5786 |  1.99
io           |      257 |     12428 |  2.07
club         |       36 |      1715 |  2.10
us           |      145 |      6327 |  2.29
email        |       42 |      1817 |  2.31
com          |    21091 |    896702 |  2.35
dk           |      562 |     23361 |  2.41
space        |       31 |      1108 |  2.80
ca           |       58 |      1862 |  3.11
uk           |      984 |     31430 |  3.13
amsterdam    |      140 |      4290 |  3.26
xyz          |      242 |      6815 |  3.55
es           |      520 |     12493 |  4.16
au           |       48 |      1129 |  4.25
co           |      214 |      5003 |  4.28
lv           |      155 |      3572 |  4.34
frl          |      204 |      3806 |  5.36
se           |    44750 |    815301 |  5.49
in           |      140 |      2198 |  6.37
nu           |     9264 |    129163 |  7.17
nrw          |      295 |      2587 | 11.40
ru           |      246 |      2140 | 11.50
bank         |     1327 |      2943 | 45.09

-- 
	Viktor.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20180627/9d2d7581/attachment.html>