At desec.io, we automatically sign and deploy CDS/CDNSKEY records for all zones. Still, of all zones delegated to our name servers, only 53% are securely delegated. This breaks down into 94% securely delegated for TLDs that use CDS/CDNSKEY bootstrapping (AFAIK, .ch, .cr, .cz, .li, .nu, .se, .sk) and 52% for other TLDs.
(Above statistics do not include zones from our own public suffix dedyn.io, which are automatically securely delegated. Also, some rare edge cases may not be properly counted.) Best, Nils On Fri, 2022-01-14 at 08:00 +0100, Moritz Müller wrote: > I’ve supervised an undergraduate student last year, who looked a bit > into CDS Deployment [1]. > Though he mostly analysed .ch data as well. > > Moritz > > [1] http://essay.utwente.nl/86832/1/van%20Beijnum_BA_EEMCS.pdf > > > > > On 13 Jan 2022, at 14:14, Daniel Stirnimann < > > daniel.stirnim...@switch.ch> wrote: > > > > I meant to say "For 2021 we processed". > > > > Still need to get used to typing the new year :-) > > > > Daniel > > > > On 13.01.22 14:11, Daniel Stirnimann wrote: > > > Hi Eric, > > > > > > Some statistics for .ch/.li which are some of the few TLDs > > > supporting > > > CDS/CDNSKEY [1]. > > > > > > For 2020 we processed: > > > > > > 189'206 BOOTSTRAP > > > 518 DELETE > > > 44'749 ROLLOVER > > > > > > Slide 3 [2] contains some more historical numbers. Context about > > > the > > > number of signed delegations in .ch [3]. > > > > > > Daniel > > > > > > [1] https://github.com/oskar456/cds-updates/ > > > [2] https://68.schedule.icann.org/meetings/EqJCzT5N6kcZhh2TT > > > [3] https://www.nic.ch/statistics/dnssec/ > > > > > > > > > On 13.01.22 04:12, Eric Rescorla wrote: > > > > Hi folks > > > > > > > > Does anyone have stats on the deployment of CDS and/or CDNSKEY? > > > > I see > > > > that Chung et al. report very low deployment in 2017, but maybe > > > > things > > > > have changed? > > > > > > > > _______________________________________________ > > DNSOP mailing list > > DNSOP@ietf.org > > https://www.ietf.org/mailman/listinfo/dnsop > > _______________________________________________ > DNSOP mailing list > DNSOP@ietf.org > https://www.ietf.org/mailman/listinfo/dnsop -- deSEC e.V. · Kyffhäuserstr. 5 · 10781 Berlin · Germany Vorstandsvorsitz: Nils Wisiol Registergericht: AG Berlin (Charlottenburg) VR 37525 _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
