[Dnssec-deployment] Stats on DNSSEC at the top level

Edward Lewis Ed.Lewis at neustar.biz
Wed May 16 09:06:50 EDT 2012


Update - after an off-line exchange, I miscounted something.  "6 
cctlds" (of the non xn-- kind) are un-DS'd, not five as I noted below.

Now all us bean-counter-types can nap more easily. ;)

At 16:34 -0400 5/15/12, Edward Lewis wrote:
>Comparing with my numbers, we agree.
>
>I see 2 xn--ccTLDs, 62 ccTLDs and 11 gTLDs with DS records. (=75)
>I see 3 xn--ccTLDs,  5 ccTLDs and  1 gTLD  with DNSKEY/no DS record set (=9)
>
>In my counts I do add in the root (making my total 85 signed) and I 
>skip the 11 test zones.
>
>At 15:00 -0400 5/15/12, Steve Crocker wrote:
>>86 names are signed according to the IANA database.  Eleven of 
>>these are test names related to the IDN program.  That leaves 75 
>>"real" TLDs that have DS records in the root zone as of May 15, 
>>2012.
>>
>>These are divided into ccTLDs vs gTLDs and "classic" vs IDN.  There 
>>aren't any signed IDN gTLDs, but there likely will be after the 
>>applications for new gTLDs are evaluated and processed.
>>
>>Steve
>
>--
>-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
>Edward Lewis
>NeuStar                    You can leave a voice message at +1-571-434-5468
>
>2012...time to reuse those 1984 calendars!

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis
NeuStar                    You can leave a voice message at +1-571-434-5468

2012...time to reuse those 1984 calendars!


More information about the Dnssec-deployment mailing list