[dns-operations] Update: 2019-12 DNSSEC stats

Viktor Dukhovni ietf-dane at dukhovni.org
Wed Jan 1 07:21:22 UTC 2020


With daily updates at https://stats.dnssec-tools.org I decided some time
back that it no longer made sense to post monthly updates to this list,
but perhaps a short annual note is not out of place.  Some highlights
for this year are:

  - 10.70 million signed delegations, up from ~8.77 million a year ago.
    + 1.50 million signed .COM delegations, up from ~973 thousand.
    + 97 TLDs with 1000+ signed delegations, up from 76.

  - 1.73 million DANE SMTP domains, up from ~775 thousand a year ago.
    + DANE MX hosts in 5.0 thousand zones, up from ~3.8 thousand.

  - ECDSA P256 (13) now most common KSK algorithm, ahead of RSASHA256 (8).
    + Last year: 4,005,976 alg 8; 1,908,218 alg 13.
    + This year: 3,798,256 alg 8; 3,937,115 alg 13.

Happy New Year.

-- 
    Viktor.

P.S.

If your DNSSEC-signed domain is MX-hosted by Google, please consider
using mx[1-4].smtp.goog, which are also DNSSEC-signed, and may one of
these days (with a bit of nagging) also have TLSA RRs:

    https://twitter.com/VDukhovni/status/1189182014706143234

Would be great to see the count of such domains rise substantially from
today's 180.



More information about the dns-operations mailing list