Re: [DNSOP] draft-ietf-dnsop-nsec3-guidance: fresh iteration count stats

[Viktor Dukhovni <[e-mail]>]

If there's appetite to go even lower than 50, the relevant counts are:

   8898 21
      6 22
     19 23
     87 24
     13 25
      1 27
      1 29
     14 30
      4 31
     39 32
   1112 33
     33 35
      1 39
  43384 40
     35 42
  12281 50

Since the zone count for 20 in mid October was 531,146, that seems to be
the lowest realistic limit we can impose, if we're willing to apply enough
pressure to also get the ~66k zones between 21 and 50 to make changes.

> On 4 Nov 2021, at 4:46 pm, Viktor Dukhovni <[e-mail]> wrote:
> 
> Just in case further reductions occurred since mid-October, I did a quick
> rescan of zones which had >= 51 iterations, and the absolute frequencies
> are below.  Still mostly negligible, except for 100, 150, and a small
> Raytheon bump at 500.  So the question boils down to whether we want to
> nudge the 150s and perhaps also the 100s down to either 100 or 50, setting
> the recommended resolver limit there (and of course still strongly recommend
> the auth zone signers to use 0).
> 
>      1 51
>     19 52
>      1 53
>      1 54
>      1 55
>      2 56
>      1 60
>      1 61
>     12 64
>      1 67
>      2 69
>     75 75
>      1 80
>      8 81
>      5 84
>     33 85
>     20 90
>      1 96
>     11 99
>  20038 100

-- 
	Viktor.