[dnssec-deployment] [regarding crypto issues on DNSSEC]

[Dmitry Burkov]

Lutz Donnerhacke wrote:

Hi Lutz,
> * Dmitry Burkov wrote:
>   
>>> OTOH the TLD ru has the second high penetration with DNSSEC among the TLDs.
>>> Only se has more signed domains.
>>>
>>>       
>> ???
>>     
>
> Top 10 TLD containing DNSSec zones:
>    1997   +10 SE
>     761   +37 RU
>     643  +434 ARPA
>     562   +59 COM
>     499  +142 BR
>     459    +7 CZ
>     381   +48 DE
>     245   +35 ORG
>     189    +1 BG
>     136   +55 NET
>
>   

<DNSKEY found but no parent => Secury Entry Point>

What do you want to prove?
That someone experiments in Russia - but it is true.

You missed a lot of  zones signed in such manner - as I know 50 times more.
I can even add more info as they had internal testbed with signing whole 
zone (~2mln) to estimate sizing and performance issues.

>> http://secspider.cs.ucla.edu/ru--zone.html
>>     
>
> http://www.dnssec.ru/en/
>
>   
>> Of course, there are a few tests in Russia - as one of registrators -
>> r1.ru - as we need info technical and performance issues- but that's all.
>>     
>
> Your "test" are much larger than normal deployment in other regions.
>   
Because it was done by one of registrars to estimate potential 
customer's needs  too.
It is their own decision to experiment in such way.

Dima

> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list <dnssec-deployment at shinkuro.com>.
> To unsubscribe, E-mail to: <dnssec-deployment-off at shinkuro.com>
> A public archive is available here: <http://mail.shinkuro.com:8100/Lists/dnssec-deployment/>
> and older material is at
> <http://mail.shinkuro.com:8100/Lists/dnssec-deployment-archive/>
>