This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/[email protected]/
[dns-wg] dnssec statistics action point 52.2
- Previous message (by thread): [dns-wg] dnssec statistics action point 52.2
- Next message (by thread): [dns-wg] dnssec statistics action point 52.2
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Brett Carr
brettcarr at ripe.net
Tue Sep 19 11:06:58 CEST 2006
Hello Ed, > -----Original Message----- > From: Edward Lewis [mailto:Ed.Lewis at neustar.biz] > Sent: Monday, September 18, 2006 6:37 PM > To: Brett Carr > Cc: dns-wg at ripe.net > Subject: Re: [dns-wg] dnssec statistics action point 52.2 > > At 16:11 +0200 9/18/06, Brett Carr wrote: > >At the RIPE 52 meeting, the DNS Working Group asked us to provide > >statistics on secured delegations within RIPE NCC hosted zones. > > > >At the time of this e-mail, the figures are as follows: > > > >Total number of zones hosted as a primary by RIPE NCC - 113 > >Total number of primary zones that are signed - 72 > >Total number of NS records in all zones - 521,811 > >Total number of DS records in all zones - 61 > > > >We are of course happy to answer any questions about these numbers. > > Thanks for the numbers. What I would like to do > is to measure the community interest in DNSSEC in > terms of how many are deploying DNSSEC, and so I > have some questions. > > As far as the 521,811 NS records - how many > different "sets" of NS records does that > represent. Specifically, how many of those > delegations are to outside (non-RIPE NCC) > administrations? > NS Record Sets: 225432 RIPE NCC: 49 Other: 225383 > Same for the DS records. How many sets, and how > many sets to outside administrations? DS Records: 61 RIPE NCC: 14 Other: 47 > > The measure of adoption I am looking at is what > percent of zones delegated away from RIPE NCC are > signed. It would also be interesting, but > probably too time consuming, to find the > percentage of administrations with delegations > that are deploying DNSSEC. (I.e., you may have > 10 zones signed, but that could represent just 1 > administration.) So I'd read the percentage of signed zones as 0.02 My feeling is we are still currently just looking at very early experimentation. -- Brett Carr RIPE Network Coordination Centre Systems Engineer -- Operations Group Amsterdam, Netherlands GPG Key fingerprint = F20D B2A7 C91D E370 44CF F244 B6A1 EF48 E743 F7D8
- Previous message (by thread): [dns-wg] dnssec statistics action point 52.2
- Next message (by thread): [dns-wg] dnssec statistics action point 52.2
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
[ dns-wg Archives ]