stephen> It seems odd that you're telling someone what they ought not be stephen> worried about. Wouldn't it be better to be convincing that stephen> there's nothing to worry about? (E.g. via stats.)
It's a few years out of date but this has actually improved. I was on the DNS team at comcast. I've confirmed that this is still more or less what they see. For 500-600 billion queries per day, 1-2 dozen DNSSEC related failures per month (modulo a few folks in .mil or .gov that have NTAs for long standing failures). That's with validation on all queries. That's in the below noise range. I wish I had packet drop rates in that range. ;) _______________________________________________ dns-privacy mailing list [email protected] https://www.ietf.org/mailman/listinfo/dns-privacy
