[dns-wg] dnssec statistics action point 52.2
- Previous message (by thread): [dns-wg] dnssec statistics action point 52.2
- Next message (by thread): [dns-wg] dnssec statistics action point 52.2
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Brett Carr
brettcarr at ripe.net
Tue Sep 19 11:06:58 CEST 2006
Hello Ed, > -----Original Message----- > From: Edward Lewis [mailto:Ed.Lewis at neustar.biz] > Sent: Monday, September 18, 2006 6:37 PM > To: Brett Carr > Cc: dns-wg at ripe.net > Subject: Re: [dns-wg] dnssec statistics action point 52.2 > > At 16:11 +0200 9/18/06, Brett Carr wrote: > >At the RIPE 52 meeting, the DNS Working Group asked us to provide > >statistics on secured delegations within RIPE NCC hosted zones. > > > >At the time of this e-mail, the figures are as follows: > > > >Total number of zones hosted as a primary by RIPE NCC - 113 > >Total number of primary zones that are signed - 72 > >Total number of NS records in all zones - 521,811 > >Total number of DS records in all zones - 61 > > > >We are of course happy to answer any questions about these numbers. > > Thanks for the numbers. What I would like to do > is to measure the community interest in DNSSEC in > terms of how many are deploying DNSSEC, and so I > have some questions. > > As far as the 521,811 NS records - how many > different "sets" of NS records does that > represent. Specifically, how many of those > delegations are to outside (non-RIPE NCC) > administrations? > NS Record Sets: 225432 RIPE NCC: 49 Other: 225383 > Same for the DS records. How many sets, and how > many sets to outside administrations? DS Records: 61 RIPE NCC: 14 Other: 47 > > The measure of adoption I am looking at is what > percent of zones delegated away from RIPE NCC are > signed. It would also be interesting, but > probably too time consuming, to find the > percentage of administrations with delegations > that are deploying DNSSEC. (I.e., you may have > 10 zones signed, but that could represent just 1 > administration.) So I'd read the percentage of signed zones as 0.02 My feeling is we are still currently just looking at very early experimentation. -- Brett Carr RIPE Network Coordination Centre Systems Engineer -- Operations Group Amsterdam, Netherlands GPG Key fingerprint = F20D B2A7 C91D E370 44CF F244 B6A1 EF48 E743 F7D8
- Previous message (by thread): [dns-wg] dnssec statistics action point 52.2
- Next message (by thread): [dns-wg] dnssec statistics action point 52.2
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
[ dns-wg Archives ]