[dns-operations] Some DNSSEC adoption data points, anyone know of more comprehensive surveys?

[Peter Koch]

On Mon, Apr 30, 2018 at 01:23:49AM -0400, Viktor Dukhovni wrote:

> The top 10 public suffixes serving non-delegated domains are:
> 
>   116074 de

as per 30 April, we had ~172000 domains (out of 16.3 million)
that were authoritatively served from within the DE zone.
We usually do not count those in our DNSSEC figures because the
numbers are subject to some fluctuation and only some domains are
served this way to explicitly take advantage of the "implicit"
DNSSEC coverage. For delegations, we have around 89000
with key material registered and roughly another 23000
waiting to do so (consistent with numbers provided, for example,
at the ICANN58 DNSSEC workshop).

Of course, "DNSSEC adoption" needs to take into account
validation (or lack thereof).

-Peter