-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Olaf, On 12/04/20 09:09 , Olaf Kolkman wrote:
On Apr 19, 2012, at 8:46 PM, Daniel Karrenberg wrote:
Further to Olaf Kolkman's question at the meeting: we publish the number of queries with DNSOK set continuously at
http://k.root-servers.org/statistics/ROOT/dnssec.html
This can be at all times compared to
http://k.root-servers.org/statistics/ROOT/nodes.html
So the answer to Olaf's question is that at present roughly two thirds of the queries arriving at k-root have the DO-bit set.
Thanks Daniel,
But my question was not statistics about the OK bit (that measures DNSSEC able servers in the field) but about queries for the DNSKEY RRset, since the amount of those queries correlates with the amount of DNSSEC validation that is actually happening.
The RIPE NCC staff has been so kind to generate such graph on request, but it would be very nice to have that data available life. Even though the graphs do not demonstrate a significant growth at the moment.
We can certainly investigate the possibility of providing this information on a regular basis. I assume that, given the current change rate, daily updates would suffice, or are you really looking at life as in real time? Cheers, Romeo -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+RFs0ACgkQGRL9suBV+eqU4ACfe+WueuOdGuRjb65TR7CVGGpp 7ooAniIC4L+OBxVXQtmcMGKTY00ND2/e =hnoT -----END PGP SIGNATURE-----