Hi Anand, Thank you for publishing this. Assuming these are all valid queries (i.e. not belonging to the 98% of malformed queries root servers usually get), what fraction of the total valid queries does this constitute? Would the actual DNSSEC penetration rate be different from this number (e.g. due to possible differences in caching, etc.)? Thanks, Andrei Anand Buddhdev wrote on 11/06/2012 11:51:
Dear colleagues,
During the DNS Working Group session at RIPE 64, Olaf Kolkman asked the RIPE NCC to provide graphs of DNSKEY queries arriving at K-root. These graphs, especially the yearly one, are a good indicator about the level of DNSSEC validation happening for the root zone.
We have enabled automatic generation of these graphs. They are available at: http://k.root-servers.org/statistics/ROOT/dnskey_queries.html
If you have any questions, please email <dns@ripe.net>.
Regards,
Anand Buddhdev RIPE NCC
-- Andrei Robachevsky Technology Program Manager Internet Society www.isoc.org