Detailed Monitoring Summary:

DNSSEC Summary
2,600,436 Zones
1,852,041 DNSSEC enabled zones
1,711,835 Zones use both KSKs and ZSKs
170 Zones are serving revoked keys
1,148,708 DNSSEC verified zones
1,781,283 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
Unknown Algorithm89
DSA-NSEC3-SHA1 [DSA-NSEC3-SHA1]17
DSA/SHA-1 [DSA]90
ECC/GOST [ECC-GOST]55
ECDSA Curve P-256 with SHA-256 [ECDSAP256SHA256]1,413,883
ECDSA Curve P-384 with SHA-384 [ECDSAP384SHA384]14,298
Private [PRIVATEOID]9
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]1,432,475
RSA/MD5 [RSAMD5]18
RSA/SHA-1 [RSASHA1]62,724
RSA/SHA256 [RSASHA256]1,600,061
RSA/SHA512 [RSASHA512]36,637
DANE Summary
61,994 DANE enabled zones with TLSA records
309 PKIX based Trust Anchor TLSA records (Cert Usage 0)
2,824 PKIX based End Entity TLSA records (Cert Usage 1)
3,089 DANE based Trust Anchor TLSA records (Cert Usage 2)
46,727 DANE based End Entity TLSA records (Cert Usage 3)
2,078 Zones have deployed TLSA for Secure SMTP (Port 465)
1,018 Zones have deployed TLSA for Secure POP3 (Port 995)
2,811 Zones have deployed TLSA for SMTP with STARTTLS (Port 587)
245 Zones have deployed TLSA for Alternate SMTP (Port 2525)
31,596 Zones have deployed TLSA for HTTPS (Port 443)
11,124 Zones have deployed TLSA for SMTP (Port 25)
743 Zones have deployed TLSA for POP3 (Port 110)
2,032 Zones have deployed TLSA for Secure IMAP (Port 993)
1,302 Zones have deployed TLSA for IMAP (Port 143)

Distribution of RRSIG lifetimes on DNSKEY RRsets