Detailed Monitoring Summary:

DNSSEC Summary
9,105,358 Zones
7,945,023 DNSSEC enabled zones
7,000,617 Zones use both KSKs and ZSKs
108 Zones are serving revoked keys
5,138,626 DNSSEC verified zones
6,679,511 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
ECC/GOST [ECC-GOST]18
Private [PRIVATEOID]2
ECDSA Curve P-256 with SHA-256 [ECDSAP256SHA256]4,918,352
RSA/SHA512 [RSASHA512]245,539
RSA/MD5 [RSAMD5]4
DSA-NSEC3-SHA1 [DSA-NSEC3-SHA1]21
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]124,161
ECDSA Curve P-384 with SHA-384 [ECDSAP384SHA384]131,810
RSA/SHA-1 [RSASHA1]53,855
Unknown Algorithm489
DSA/SHA-1 [DSA]42
RSA/SHA256 [RSASHA256]10,960,024
DANE Summary
424,951 DANE enabled zones with TLSA records
315 PKIX based Trust Anchor TLSA records (Cert Usage 0)
1,200 PKIX based End Entity TLSA records (Cert Usage 1)
7,309 DANE based Trust Anchor TLSA records (Cert Usage 2)
184,776 DANE based End Entity TLSA records (Cert Usage 3)
1,926 Zones have deployed TLSA for Secure SMTP (Port 465)
86,987 Zones have deployed TLSA for SMTP (Port 25)
2,404 Zones have deployed TLSA for SMTP with STARTTLS (Port 587)
96,876 Zones have deployed TLSA for HTTPS (Port 443)
1,736 Zones have deployed TLSA for Secure IMAP (Port 993)
1,184 Zones have deployed TLSA for Secure POP3 (Port 995)
1,297 Zones have deployed TLSA for IMAP (Port 143)
282 Zones have deployed TLSA for Alternate SMTP (Port 2525)
909 Zones have deployed TLSA for POP3 (Port 110)