[dns-operations] Update: 2019-12 DNSSEC stats
Viktor Dukhovni
ietf-dane at dukhovni.org
Wed Jan 1 07:21:22 UTC 2020
With daily updates at https://stats.dnssec-tools.org I decided some time
back that it no longer made sense to post monthly updates to this list,
but perhaps a short annual note is not out of place. Some highlights
for this year are:
- 10.70 million signed delegations, up from ~8.77 million a year ago.
+ 1.50 million signed .COM delegations, up from ~973 thousand.
+ 97 TLDs with 1000+ signed delegations, up from 76.
- 1.73 million DANE SMTP domains, up from ~775 thousand a year ago.
+ DANE MX hosts in 5.0 thousand zones, up from ~3.8 thousand.
- ECDSA P256 (13) now most common KSK algorithm, ahead of RSASHA256 (8).
+ Last year: 4,005,976 alg 8; 1,908,218 alg 13.
+ This year: 3,798,256 alg 8; 3,937,115 alg 13.
Happy New Year.
--
Viktor.
P.S.
If your DNSSEC-signed domain is MX-hosted by Google, please consider
using mx[1-4].smtp.goog, which are also DNSSEC-signed, and may one of
these days (with a bit of nagging) also have TLSA RRs:
https://twitter.com/VDukhovni/status/1189182014706143234
Would be great to see the count of such domains rise substantially from
today's 180.
More information about the dns-operations
mailing list