[dns-wg] DNSOK queries to k-root

Hi Romeo/Olaf,

On 20 apr. 2012, at 09:57, Romeo Zwart wrote:

>> Thanks Daniel,
>> 
>> But my question was not statistics about the OK bit (that measures
>> DNSSEC able servers in the field) but about queries for the DNSKEY
>> RRset, since the amount of those queries correlates with the amount
>> of DNSSEC validation that is actually happening.
>> 
>> The RIPE NCC staff has been so kind to generate such graph on
>> request, but it would be very nice to have that data available
>> life. Even though the graphs do not demonstrate a significant
>> growth at the moment.
> 
> We can certainly investigate the possibility of providing this
> information on a regular basis. I assume that, given the current
> change rate, daily updates would suffice, or are you really looking at
> life as in real time?


We've created similar statistics in the past and saw low but promising numbers for our own signed domains; obviously statistics for the root zone would be more significant in this respect. I'm not familiar enough with your setup to judge what would be a reasonable frequency but daily updates sounds good to me.

Cheers,

Roland

-- Roland M. van Rijswijk
-- SURFnet Middleware Services
-- t: +31-30-2305388
-- e: roland.vanrijswijk at surfnet.nl