Detailed Monitoring Summary:

DNSSEC Summary
16,231,574 Zones
13,173,165 DNSSEC enabled zones
11,458,691 Zones use both KSKs and ZSKs
65 Zones are serving revoked keys
8,336,383 DNSSEC verified zones
11,041,888 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
RSA/MD5 [RSAMD5]7
RSA/SHA-1 [RSASHA1]96,793
DSA/SHA-1 [DSA]48
Unknown Algorithm47,518
ECC/GOST [ECC-GOST]8
Private [PRIVATEOID]1
RSA/SHA512 [RSASHA512]275,696
ECDSA Curve P-384 with SHA-384 [ECDSAP384SHA384]149,760
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]107,841
ECDSA Curve P-256 with SHA-256 [ECDSAP256SHA256]8,614,604
Diffie-Hellman [DH]1
RSA/SHA256 [RSASHA256]17,547,102
DSA-NSEC3-SHA1 [DSA-NSEC3-SHA1]15
DANE Summary
706,594 DANE enabled zones with TLSA records
450 PKIX based Trust Anchor TLSA records (Cert Usage 0)
2,052 PKIX based End Entity TLSA records (Cert Usage 1)
9,344 DANE based Trust Anchor TLSA records (Cert Usage 2)
322,833 DANE based End Entity TLSA records (Cert Usage 3)
4,242 Zones have deployed TLSA for SMTP with STARTTLS (Port 587)
115,665 Zones have deployed TLSA for SMTP (Port 25)
3,486 Zones have deployed TLSA for Secure SMTP (Port 465)
1,664 Zones have deployed TLSA for IMAP (Port 143)
2,354 Zones have deployed TLSA for Secure POP3 (Port 995)
1,862 Zones have deployed TLSA for POP3 (Port 110)
422 Zones have deployed TLSA for Alternate SMTP (Port 2525)
201,853 Zones have deployed TLSA for HTTPS (Port 443)
3,137 Zones have deployed TLSA for Secure IMAP (Port 993)