[ksk-rollover] Now publishing updated RFC8145 graphs and IP addresses of resolvers reporting

[Matt Larson]

Following up to my message below from last month about ICANN's publishing the specific addresses indicating being configured with only KSK-2010 via RFC 8145-style key tag reporting:

As you can see on the charts on http://root-trust-anchor-reports.research.icann.org, there is a strong downward trend in the percentage of servers reporting RFC 8145 data having only KSK-2010. We have heard from very few of you about what you found if you investigated the addresses networks for which you are responsible, and we would really like to get a feeling if that downward trend is due to your efforts or due to the resolvers that Wes Hardaker reported on May 9.

Please let us know with a post to this list, or privately to me if you'd rather.

Thanks,

Matt


On May 15, 2018, at 3:57 PM, Matt Larson <matt.larson at icann.org<mailto:matt.larson at icann.org>> wrote:

We wanted to let everyone know that we've updated the graphs of RFC 8145 data we're receiving. In addition, as of today, we've also started publishing the list of individual addresses that are sending RFC 8145 data indicating they are configured with only KSK-2010 as a trust anchor. See this page for more information about both the graphs and the list of addresses:

http://root-trust-anchor-reports.research.icann.org

While the graphs show an "up and to right" trend in the number of sources reporting only KSK-2010, Wes Hardaker has done some excellent research and found what he believes is the source for many of these queries; more details are on that page, as well.

Matt


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/ksk-rollover/attachments/20180613/415bb33e/attachment.html>