Detailed Monitoring Summary:

DNSSEC Summary
960,264 Zones
819,564 DNSSEC enabled zones
743,510 Zones use both KSKs and ZSKs
3 Zones are serving revoked keys
981,380 DNSSEC verified zones
1,135,208 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
RSA/SHA-1 [RSASHA1]5,106
ECC/GOST [ECC-GOST]2
ECDSA Curve P-256 with SHA-256 [ECDSAP256SHA256]369,427
RSA/SHA512 [RSASHA512]6,626
Private [PRIVATEOID]1
DSA/SHA-1 [DSA]2
Unknown Algorithm31
ECDSA Curve P-384 with SHA-384 [ECDSAP384SHA384]7,531
RSA/SHA256 [RSASHA256]1,258,307
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]8,624
DANE Summary
16,299 DANE enabled zones with TLSA records
19 PKIX based Trust Anchor TLSA records (Cert Usage 0)
42 PKIX based End Entity TLSA records (Cert Usage 1)
603 DANE based Trust Anchor TLSA records (Cert Usage 2)
10,757 DANE based End Entity TLSA records (Cert Usage 3)
179 Zones have deployed TLSA for IMAP (Port 143)
30 Zones have deployed TLSA for Alternate SMTP (Port 2525)
221 Zones have deployed TLSA for Secure IMAP (Port 993)
4,022 Zones have deployed TLSA for SMTP (Port 25)
6,041 Zones have deployed TLSA for HTTPS (Port 443)
131 Zones have deployed TLSA for POP3 (Port 110)
282 Zones have deployed TLSA for Secure SMTP (Port 465)
332 Zones have deployed TLSA for SMTP with STARTTLS (Port 587)
183 Zones have deployed TLSA for Secure POP3 (Port 995)