At desec.io, we automatically sign and deploy CDS/CDNSKEY records for
all zones. Still, of all zones delegated to our name servers, only 53%
are securely delegated. This breaks down into 94% securely delegated
for TLDs that use CDS/CDNSKEY bootstrapping (AFAIK, .ch, .cr, .cz, .li,
.nu, .se, .sk) and 52% for other TLDs.

(Above statistics do not include zones from our own public suffix
dedyn.io, which are automatically securely delegated. Also, some rare
edge cases may not be properly counted.)

Best,
Nils

On Fri, 2022-01-14 at 08:00 +0100, Moritz Müller wrote:
> I’ve supervised an undergraduate student last year, who looked a bit
> into CDS Deployment [1].
> Though he mostly analysed .ch data as well.
> 
> Moritz
> 
> [1] http://essay.utwente.nl/86832/1/van%20Beijnum_BA_EEMCS.pdf
> 
> 
> 
> > On 13 Jan 2022, at 14:14, Daniel Stirnimann <
> > daniel.stirnim...@switch.ch> wrote:
> > 
> > I meant to say "For 2021 we processed".
> > 
> > Still need to get used to typing the new year :-)
> > 
> > Daniel
> > 
> > On 13.01.22 14:11, Daniel Stirnimann wrote:
> > > Hi Eric,
> > > 
> > > Some statistics for .ch/.li which are some of the few TLDs
> > > supporting
> > > CDS/CDNSKEY [1].
> > > 
> > > For 2020 we processed:
> > > 
> > > 189'206  BOOTSTRAP
> > > 518      DELETE
> > > 44'749   ROLLOVER
> > > 
> > > Slide 3 [2] contains some more historical numbers. Context about
> > > the
> > > number of signed delegations in .ch [3].
> > > 
> > > Daniel
> > > 
> > > [1] https://github.com/oskar456/cds-updates/
> > > [2] https://68.schedule.icann.org/meetings/EqJCzT5N6kcZhh2TT
> > > [3] https://www.nic.ch/statistics/dnssec/
> > > 
> > > 
> > > On 13.01.22 04:12, Eric Rescorla wrote:
> > > > Hi folks
> > > > 
> > > > Does anyone have stats on the deployment of CDS and/or CDNSKEY?
> > > > I see
> > > > that Chung et al. report very low deployment in 2017, but maybe
> > > > things
> > > > have changed?
> > > > 
> > 
> > _______________________________________________
> > DNSOP mailing list
> > DNSOP@ietf.org
> > https://www.ietf.org/mailman/listinfo/dnsop
> 
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop
-- 
deSEC e.V. · Kyffhäuserstr. 5 · 10781 Berlin · Germany

Vorstandsvorsitz: Nils Wisiol
Registergericht: AG Berlin (Charlottenburg) VR 37525


_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to