Detailed Monitoring Summary:

DNSSEC Summary
8,354,398 Zones
7,685,363 DNSSEC enabled zones
6,441,119 Zones use both KSKs and ZSKs
404 Zones are serving revoked keys
4,998,695 DNSSEC verified zones
7,245,585 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
Unknown Algorithm218
DSA-NSEC3-SHA1 [DSA-NSEC3-SHA1]35
DSA/SHA-1 [DSA]90
ECC/GOST [ECC-GOST]67
ECDSA Curve P-256 with SHA-256 [ECDSAP256SHA256]4,655,199
ECDSA Curve P-384 with SHA-384 [ECDSAP384SHA384]174,546
Private [PRIVATEOID]9
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]4,362,764
RSA/MD5 [RSAMD5]18
RSA/SHA-1 [RSASHA1]265,746
RSA/SHA256 [RSASHA256]6,723,078
RSA/SHA512 [RSASHA512]419,528
DANE Summary
361,315 DANE enabled zones with TLSA records
506 PKIX based Trust Anchor TLSA records (Cert Usage 0)
3,742 PKIX based End Entity TLSA records (Cert Usage 1)
5,202 DANE based Trust Anchor TLSA records (Cert Usage 2)
152,278 DANE based End Entity TLSA records (Cert Usage 3)
2,849 Zones have deployed TLSA for Secure SMTP (Port 465)
1,456 Zones have deployed TLSA for Secure POP3 (Port 995)
3,705 Zones have deployed TLSA for SMTP with STARTTLS (Port 587)
353 Zones have deployed TLSA for Alternate SMTP (Port 2525)
133,123 Zones have deployed TLSA for HTTPS (Port 443)
14,427 Zones have deployed TLSA for SMTP (Port 25)
1,159 Zones have deployed TLSA for POP3 (Port 110)
2,793 Zones have deployed TLSA for Secure IMAP (Port 993)
1,864 Zones have deployed TLSA for IMAP (Port 143)