At desec.io, we automatically sign and deploy CDS/CDNSKEY records for
all zones. Still, of all zones delegated to our name servers, only 53%
are securely delegated. This breaks down into 94% securely delegated
for TLDs that use CDS/CDNSKEY bootstrapping (AFAIK, .ch, .cr, .cz, .li,
.nu, .se, .sk) an
Hi,
I run/manage the EDU.ZA zone and am a Registrar.
Both systems poll for CDS records if I'm not running the DNS for the
domain (e.g. many of the Registrar domains). I have also given
presentations on this at the ICANN DNSSEC & Security Workshop - which I
also assist with.
I poll once a
I’ve supervised an undergraduate student last year, who looked a bit into CDS
Deployment [1].
Though he mostly analysed .ch data as well.
Moritz
[1] http://essay.utwente.nl/86832/1/van%20Beijnum_BA_EEMCS.pdf
> On 13 Jan 2022, at 14:14, Daniel Stirnimann
> wrote:
>
> I meant to say "For 202
I meant to say "For 2021 we processed".
Still need to get used to typing the new year :-)
Daniel
On 13.01.22 14:11, Daniel Stirnimann wrote:
> Hi Eric,
>
> Some statistics for .ch/.li which are some of the few TLDs supporting
> CDS/CDNSKEY [1].
>
> For 2020 we processed:
>
> 189'206 BOOTSTRA
Hi Eric,
Some statistics for .ch/.li which are some of the few TLDs supporting
CDS/CDNSKEY [1].
For 2020 we processed:
189'206 BOOTSTRAP
518 DELETE
44'749 ROLLOVER
Slide 3 [2] contains some more historical numbers. Context about the
number of signed delegations in .ch [3].
Daniel
[1]
Hi folks
Does anyone have stats on the deployment of CDS and/or CDNSKEY? I see that
Chung et al. report very low deployment in 2017, but maybe things have
changed?
-Ekr
___
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
