Re: [DNSOP] CDS/CDNSKEY Deployment
Daniel Stirnimann <daniel.stirnimann@switch.ch> Thu, 13 January 2022 13:14 UTC
Return-Path: <daniel.stirnimann@switch.ch>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FCF93A0B2A for <dnsop@ietfa.amsl.com>; Thu, 13 Jan 2022 05:14:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.802
X-Spam-Level:
X-Spam-Status: No, score=-2.802 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.714, SPF_HELO_NONE=0.001, T_SPF_TEMPERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=switch.ch
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 18tzmqumos_Z for <dnsop@ietfa.amsl.com>; Thu, 13 Jan 2022 05:14:50 -0800 (PST)
Received: from mx1.switch.ch (mx1.switch.ch [85.235.88.32]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 652D43A09E6 for <dnsop@ietf.org>; Thu, 13 Jan 2022 05:14:49 -0800 (PST)
X-Virus-Scanned: by SpamTitan at switch.ch
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=switch.ch; s=selector1; t=1642079686; bh=fQ/NnO/sL6yhIgcVFVD2o2seCQBecHz3YC+9ZTrKync=; h=Date:Subject:From:To:References:In-Reply-To; b=i5/65Dy6rkLn6OKRvFRqt+vq8RiZYJ2/7KvSfzkTIROV7sIb9ggav1DWCocqksJZ4 RpJ2vMSds0zmXb8+7mmbK3hF9HKMobu+rVPXrtjPavB8to+IxNBMXOSpJclNVxBla7 uuijWVo4p2DinDUHgblP/cuqYNJ4mch80LW2Nzukws/B1Voxu0S9516Tc6Hyjwro00 BLNSLWd3hRaH502dwp3RzzfOKVZQG5F2IPbxLDvy4WNqAlOiO6H8MePttWE0mXUXwV IcPspbRtUWnY8uJxciBBaG4IIWKzX2/dL7hLKRB10BCqKcd54+YMfOk/X2dDT+mkCF Oiy7msOl/ZUnw==
Authentication-Results: mx1.switch.ch; x-trusted-ip=pass
Message-ID: <75c4bcad-ce70-3d08-8f3a-d123a0603a31@switch.ch>
Date: Thu, 13 Jan 2022 14:14:40 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Thunderbird/91.5.0
Content-Language: en-US
From: Daniel Stirnimann <daniel.stirnimann@switch.ch>
To: Eric Rescorla <ekr@rtfm.com>, dnsop WG <dnsop@ietf.org>
References: <CABcZeBMrRDqgCbNAAL=zjRqNZ-u8orw0G_2Wk5kZjxhR8WKnxw@mail.gmail.com> <eb5b99f1-9e4b-537d-097a-635816458f1b@switch.ch>
In-Reply-To: <eb5b99f1-9e4b-537d-097a-635816458f1b@switch.ch>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Originating-IP: [172.16.60.33]
X-ClientProxiedBy: SWH-S06-EXC4.swd.switch.ch (172.16.60.18) To SWH-S04-EXC2.swd.switch.ch (172.16.60.12)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/VwJH8UWl3IYoMCGOey4f2Df_E4o>
Subject: Re: [DNSOP] CDS/CDNSKEY Deployment
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 13 Jan 2022 13:14:55 -0000
I meant to say "For 2021 we processed". Still need to get used to typing the new year :-) Daniel On 13.01.22 14:11, Daniel Stirnimann wrote: > Hi Eric, > > Some statistics for .ch/.li which are some of the few TLDs supporting > CDS/CDNSKEY [1]. > > For 2020 we processed: > > 189'206 BOOTSTRAP > 518 DELETE > 44'749 ROLLOVER > > Slide 3 [2] contains some more historical numbers. Context about the > number of signed delegations in .ch [3]. > > Daniel > > [1] https://github.com/oskar456/cds-updates/ > [2] https://68.schedule.icann.org/meetings/EqJCzT5N6kcZhh2TT > [3] https://www.nic.ch/statistics/dnssec/ > > > On 13.01.22 04:12, Eric Rescorla wrote: >> Hi folks >> >> Does anyone have stats on the deployment of CDS and/or CDNSKEY? I see >> that Chung et al. report very low deployment in 2017, but maybe things >> have changed? >>
- [DNSOP] CDS/CDNSKEY Deployment Eric Rescorla
- Re: [DNSOP] CDS/CDNSKEY Deployment Daniel Stirnimann
- Re: [DNSOP] CDS/CDNSKEY Deployment Daniel Stirnimann
- Re: [DNSOP] CDS/CDNSKEY Deployment Moritz Müller
- Re: [DNSOP] CDS/CDNSKEY Deployment Mark Elkins
- Re: [DNSOP] CDS/CDNSKEY Deployment Nils Wisiol