[dns-wg] DNSOK queries to k-root

On Apr 19, 2012, at 8:46 PM, Daniel Karrenberg wrote:

> 
> Further to Olaf Kolkman's question at the meeting: we publish the number of queries with DNSOK set continuously at
> 
> http://k.root-servers.org/statistics/ROOT/dnssec.html
> 
> This can be at all times compared to 
> 
> http://k.root-servers.org/statistics/ROOT/nodes.html
> 
> So the answer to Olaf's question is that at present roughly two thirds of the queries arriving at k-root have the DO-bit set.
> 


Thanks Daniel,

But my question was not statistics about the OK bit (that measures DNSSEC able servers in the field) but about queries for the DNSKEY RRset, since the amount of those queries correlates with the amount of DNSSEC validation that is actually happening.

The RIPE NCC staff has been so kind to generate such graph on request, but it would be very nice to have that data available life. Even though the graphs do not demonstrate a significant growth at the moment.


--Olaf

________________________________________________________ 

Olaf M. Kolkman                        NLnet Labs
http://www.nlnetlabs.nl/











     

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: </ripe/mail/archives/dns-wg/attachments/20120419/057a77e6/attachment.sig>