Detailed Monitoring Summary:

DNSSEC Summary
2,166,120 Zones
1,791,676 DNSSEC enabled zones
1,763,980 Zones use both KSKs and ZSKs
208 Zones are serving revoked keys
1,663,632 DNSSEC verified zones
1,809,170 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
Unknown Algorithm2
DSA-NSEC3-SHA1 [DSA-NSEC3-SHA1]27
DSA/SHA-1 [DSA]276
ECC/GOST [ECC-GOST]131
ECDSA Curve P-256 with SHA-256 [ECDSAP256SHA256]396,696
ECDSA Curve P-384 with SHA-384 [ECDSAP384SHA384]1,100
Private [PRIVATEOID]3
Reserved 01
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]1,608,715
RSA/MD5 [RSAMD5]23
RSA/SHA-1 [RSASHA1]130,635
RSA/SHA256 [RSASHA256]2,511,296
RSA/SHA512 [RSASHA512]18,307
DANE Summary
54,976 DANE enabled zones with TLSA records
134 PKIX based Trust Anchor TLSA records (Cert Usage 0)
1,153 PKIX based End Entity TLSA records (Cert Usage 1)
DANE based Trust Anchor TLSA records (Cert Usage 2)
10,442 DANE based End Entity TLSA records (Cert Usage 3)
709 Zones have deployed TLSA for Secure SMTP (Port 465)
289 Zones have deployed TLSA for Secure POP3 (Port 995)
871 Zones have deployed TLSA for SMTP with STARTTLS (Port 587)
82 Zones have deployed TLSA for Alternate SMTP (Port 2525)
5,885 Zones have deployed TLSA for HTTPS (Port 443)
3,937 Zones have deployed TLSA for SMTP (Port 25)
162 Zones have deployed TLSA for POP3 (Port 110)
580 Zones have deployed TLSA for Secure IMAP (Port 993)
359 Zones have deployed TLSA for IMAP (Port 143)

Distribution of RRSIG lifetimes on DNSKEY RRsets