Detailed Monitoring Summary:

DNSSEC Summary
16,613,462 Zones
13,774,526 DNSSEC enabled zones
12,020,974 Zones use both KSKs and ZSKs
91 Zones are serving revoked keys
9,244,800 DNSSEC verified zones
11,807,722 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
RSA/SHA256 [RSASHA256]20,346,322
Private [PRIVATEOID]1
ECDSA Curve P-384 with SHA-384 [ECDSAP384SHA384]160,611
Unknown Algorithm1,658
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]120,731
DSA-NSEC3-SHA1 [DSA-NSEC3-SHA1]14
RSA/MD5 [RSAMD5]7
DSA/SHA-1 [DSA]57
RSA/SHA512 [RSASHA512]305,536
ECC/GOST [ECC-GOST]15
RSA/SHA-1 [RSASHA1]91,059
ECDSA Curve P-256 with SHA-256 [ECDSAP256SHA256]8,642,896
DANE Summary
639,759 DANE enabled zones with TLSA records
444 PKIX based Trust Anchor TLSA records (Cert Usage 0)
1,881 PKIX based End Entity TLSA records (Cert Usage 1)
8,857 DANE based Trust Anchor TLSA records (Cert Usage 2)
313,201 DANE based End Entity TLSA records (Cert Usage 3)
378 Zones have deployed TLSA for Alternate SMTP (Port 2525)
2,850 Zones have deployed TLSA for Secure IMAP (Port 993)
1,582 Zones have deployed TLSA for IMAP (Port 143)
3,147 Zones have deployed TLSA for Secure SMTP (Port 465)
3,908 Zones have deployed TLSA for SMTP with STARTTLS (Port 587)
196,569 Zones have deployed TLSA for HTTPS (Port 443)
112,214 Zones have deployed TLSA for SMTP (Port 25)
2,112 Zones have deployed TLSA for Secure POP3 (Port 995)
1,630 Zones have deployed TLSA for POP3 (Port 110)