Re: [DNSOP] draft-ietf-dnsop-nsec3-guidance: fresh iteration count stats

2021-11-04 Thread Viktor Dukhovni
If there's appetite to go even lower than 50, the relevant counts are: 8898 21 6 22 19 23 87 24 13 25 1 27 1 29 14 30 4 31 39 32 1112 33 33 35 1 39 43384 40 35 42 12281 50 Since the zone count for 20 in mid October was

Re: [DNSOP] draft-ietf-dnsop-nsec3-guidance: fresh iteration count stats

2021-11-04 Thread Viktor Dukhovni
> On 18 Oct 2021, at 12:43 am, Viktor Dukhovni wrote: > > We were waiting for TransIP to complete the migration of their managed > DNS domains from 100 iterations to 0, before collecting fresh NSEC3 > iteration count deployment statistics. > > That has now been done, and the results are below:

Re: [DNSOP] draft-ietf-dnsop-nsec3-guidance: fresh iteration count stats

2021-10-17 Thread Viktor Dukhovni
On Mon, Oct 18, 2021 at 12:43:51AM -0400, Viktor Dukhovni wrote: > On Fri, Oct 15, 2021 at 04:30:37PM -0700, internet-dra...@ietf.org wrote: > > > Filename: draft-ietf-dnsop-nsec3-guidance-01.txt > > > > Abstract: > >NSEC3 is a DNSSEC mechanism providing proof of non-existence

[DNSOP] draft-ietf-dnsop-nsec3-guidance: fresh iteration count stats

2021-10-17 Thread Viktor Dukhovni
On Fri, Oct 15, 2021 at 04:30:37PM -0700, internet-dra...@ietf.org wrote: > Filename: draft-ietf-dnsop-nsec3-guidance-01.txt > > Abstract: >NSEC3 is a DNSSEC mechanism providing proof of non-existence by >promising there are no names that exist between two domainnames >