On Apr 19, 2012, at 8:46 PM, Daniel Karrenberg wrote:
Further to Olaf Kolkman's question at the meeting: we publish the number of queries with DNSOK set continuously at
http://k.root-servers.org/statistics/ROOT/dnssec.html
This can be at all times compared to
http://k.root-servers.org/statistics/ROOT/nodes.html
So the answer to Olaf's question is that at present roughly two thirds of the queries arriving at k-root have the DO-bit set.
Thanks Daniel, But my question was not statistics about the OK bit (that measures DNSSEC able servers in the field) but about queries for the DNSKEY RRset, since the amount of those queries correlates with the amount of DNSSEC validation that is actually happening. The RIPE NCC staff has been so kind to generate such graph on request, but it would be very nice to have that data available life. Even though the graphs do not demonstrate a significant growth at the moment. --Olaf ________________________________________________________ Olaf M. Kolkman NLnet Labs http://www.nlnetlabs.nl/