Re: [DNSOP] nsec3-parameters opinions gathered

[Viktor Dukhovni <[e-mail]>]

> On 8 Nov 2021, at 6:07 am, Petr Špaček <[e-mail]> wrote:
> 
> TL;DR
> I say we should go for 0 and acknowledge in the text we are not there yet.

This means reaching out to the TLD operators again...  They were quite
cooperative ~6 months back, but I wouldn't want to take them for granted
and keep asking for multiple further rounds of changes.  So whatever target
ends up in the final document should be something they'd be willing to adopt
as a final "issue closed" update.

The iteration count distribution for the TLDs is presently:

 # TLDs NSEC3 iterations
 ------ ----------------
    147 0
    458 1
      1 2
     14 3
    112 5
      4 8
    545 10
     29 12
      1 13
      1 15
      1 17
      6 20
      2 25

The outliers above 10 are:

    ccTLDs: bn de dk pl sg ua xn--clchc0ea0b2g2a9gcd xn--yfro4i67o

    gTLDs: alstom barcelona bauhaus bcn cat erni eurovision eus firmdale gal gdn
           gmx ifm lacaixa madrid man mango nrw quebec radio ruhr sap scot seat
           sport swiss whoswho xn--55qw42g xn--80asehdb xn--80aswg xn--mgbab2bd
           xn--zfr164b

The largest by count of signed delegations are .PL (12 iterations), .DK (17) and
.DE (15).

The bulge at 10 iterations has the following top 21 SOA rnames:

    186 [e-mail].
    176 [e-mail].
     87 [e-mail].
     11 [e-mail].
      6 [e-mail].
      5 [e-mail].
      4 [e-mail].
      4 [e-mail].
      4 [e-mail].
      4 [e-mail].
      3 [e-mail].
      3 [e-mail].
      3 [e-mail].
      2 [e-mail].
      2 [e-mail].
      2 [e-mail].
      2 [e-mail].
      2 [e-mail].
      2 [e-mail].
      2 [e-mail].
      2 [e-mail].

The rest are 33 "singleton" rnames present in just 1 TLD each:

  ad ar bg cr gl gw gy hn hr it kw lat lv ly ma mc md mil mx nc
  nf pe pt ro sb tt ug uy uz ws xn--mgbai9azgqp6j xn--wgbh1c za

-- 
	Viktor.