About RIPE | Contact  | Search | Sitemap    
Homepage RIPE  
RIPE Community Mail Archives
search  
     
RIPE Navigation Ends
About RIPE Maillists
Maillists Archive
Global Lists
Non Active Lists
RIPE NCC Navigation Ends
Next Section

RE: [dns-wg] dnssec statistics action point 52.2

  • To: "'Edward Lewis'" <Ed.Lewis@localhost
  • From: "Brett Carr" brettcarr@localhost
  • Date: Tue, 19 Sep 2006 11:06:58 +0200

Hello Ed,

> -----Original Message-----
> From: Edward Lewis [
] > Sent: Monday, September 18, 2006 6:37 PM > To: Brett Carr > Subject: Re: [dns-wg] dnssec statistics action point 52.2 > > At 16:11 +0200 9/18/06, Brett Carr wrote: > >At the RIPE 52 meeting, the DNS Working Group asked us to provide > >statistics on secured delegations within RIPE NCC hosted zones. > > > >At the time of this e-mail, the figures are as follows: > > > >Total number of zones hosted as a primary by RIPE NCC - 113 > >Total number of primary zones that are signed - 72 > >Total number of NS records in all zones - 521,811 > >Total number of DS records in all zones - 61 > > > >We are of course happy to answer any questions about these numbers. > > Thanks for the numbers. What I would like to do > is to measure the community interest in DNSSEC in > terms of how many are deploying DNSSEC, and so I > have some questions. > > As far as the 521,811 NS records - how many > different "sets" of NS records does that > represent. Specifically, how many of those > delegations are to outside (non-RIPE NCC) > administrations? > NS Record Sets: 225432 RIPE NCC: 49 Other: 225383 > Same for the DS records. How many sets, and how > many sets to outside administrations? DS Records: 61 RIPE NCC: 14 Other: 47 > > The measure of adoption I am looking at is what > percent of zones delegated away from RIPE NCC are > signed. It would also be interesting, but > probably too time consuming, to find the > percentage of administrations with delegations > that are deploying DNSSEC. (I.e., you may have > 10 zones signed, but that could represent just 1 > administration.) So I'd read the percentage of signed zones as 0.02 My feeling is we are still currently just looking at very early experimentation. -- Brett Carr RIPE Network Coordination Centre Systems Engineer -- Operations Group Amsterdam, Netherlands GPG Key fingerprint = F20D B2A7 C91D E370 44CF F244 B6A1 EF48 E743 F7D8

 

Next Section
     About RIPE | Site Map | LIR Portal | About the RIPE NCC | Contact | © RIPE Community. All rights reserved.
RIPE.NET Homepage LIR Portal RIPE Community