Hello Ed,
-----Original Message----- From: Edward Lewis [mailto:Ed.Lewis@neustar.biz] Sent: Monday, September 18, 2006 6:37 PM To: Brett Carr Cc: dns-wg@ripe.net Subject: Re: [dns-wg] dnssec statistics action point 52.2
At 16:11 +0200 9/18/06, Brett Carr wrote:
At the RIPE 52 meeting, the DNS Working Group asked us to provide statistics on secured delegations within RIPE NCC hosted zones.
At the time of this e-mail, the figures are as follows:
Total number of zones hosted as a primary by RIPE NCC - 113 Total number of primary zones that are signed - 72 Total number of NS records in all zones - 521,811 Total number of DS records in all zones - 61
We are of course happy to answer any questions about these numbers.
Thanks for the numbers. What I would like to do is to measure the community interest in DNSSEC in terms of how many are deploying DNSSEC, and so I have some questions.
As far as the 521,811 NS records - how many different "sets" of NS records does that represent. Specifically, how many of those delegations are to outside (non-RIPE NCC) administrations?
NS Record Sets: 225432 RIPE NCC: 49 Other: 225383
Same for the DS records. How many sets, and how many sets to outside administrations?
DS Records: 61 RIPE NCC: 14 Other: 47
The measure of adoption I am looking at is what percent of zones delegated away from RIPE NCC are signed. It would also be interesting, but probably too time consuming, to find the percentage of administrations with delegations that are deploying DNSSEC. (I.e., you may have 10 zones signed, but that could represent just 1 administration.)
So I'd read the percentage of signed zones as 0.02 My feeling is we are still currently just looking at very early experimentation. -- Brett Carr RIPE Network Coordination Centre Systems Engineer -- Operations Group Amsterdam, Netherlands GPG Key fingerprint = F20D B2A7 C91D E370 44CF F244 B6A1 EF48 E743 F7D8