Detailed Monitoring Summary:

DNSSEC Summary
16,601,111 Zones
14,021,508 DNSSEC enabled zones
12,364,532 Zones use both KSKs and ZSKs
84 Zones are serving revoked keys
9,896,919 DNSSEC verified zones
12,044,617 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
ECDSA Curve P-384 with SHA-384 [ECDSAP384SHA384]178,803
RSA/SHA256 [RSASHA256]22,893,881
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]129,735
RSA/SHA512 [RSASHA512]340,086
Private [PRIVATEOID]1
DSA/SHA-1 [DSA]63
RSA/MD5 [RSAMD5]7
Unknown Algorithm1,549
ECC/GOST [ECC-GOST]18
RSA/SHA-1 [RSASHA1]89,432
ECDSA Curve P-256 with SHA-256 [ECDSAP256SHA256]8,170,409
DSA-NSEC3-SHA1 [DSA-NSEC3-SHA1]18
DANE Summary
607,566 DANE enabled zones with TLSA records
426 PKIX based Trust Anchor TLSA records (Cert Usage 0)
1,574 PKIX based End Entity TLSA records (Cert Usage 1)
8,204 DANE based Trust Anchor TLSA records (Cert Usage 2)
302,820 DANE based End Entity TLSA records (Cert Usage 3)
3,279 Zones have deployed TLSA for SMTP with STARTTLS (Port 587)
1,235 Zones have deployed TLSA for POP3 (Port 110)
187,931 Zones have deployed TLSA for HTTPS (Port 443)
2,616 Zones have deployed TLSA for Secure SMTP (Port 465)
2,355 Zones have deployed TLSA for Secure IMAP (Port 993)
367 Zones have deployed TLSA for Alternate SMTP (Port 2525)
1,689 Zones have deployed TLSA for Secure POP3 (Port 995)
112,084 Zones have deployed TLSA for SMTP (Port 25)
1,472 Zones have deployed TLSA for IMAP (Port 143)