[ksk-rollover] Now publishing updated RFC8145 graphs and IP addresses of resolvers reporting

Paul Hoffman paul.hoffman at icann.org
Thu May 31 14:45:34 UTC 2018


On May 31, 2018, at 6:51 AM, Miles McCredie <mwm333 at gmail.com> wrote:
> 
> On 5/15/18 3:57 PM, Matt Larson wrote:
>> We wanted to let everyone know that we've updated the graphs of RFC 8145 data we're receiving. In addition, as of today, we've also started publishing the list of individual addresses that are sending RFC 8145 data indicating they are configured with only KSK-2010 as a trust anchor. See this page for more information about both the graphs and the list of addresses:
>> 
>> 
>> http://root-trust-anchor-reports.research.icann.org
> FWIW, it looks as though the list of addresses was last updated 20180525163524.
> #Generated at 20180525163524	#	#	#	#

Thanks for pointing this out, and it is now updated. (And we are now putting more verbosity in the daily cron job...)

> One person I pointed to this data wondered whether it would be possible to add a count of the number of KSK-2010 reports per address per day.  The majority of the addresses listed for their ASN are the ISP recursives which are not validating. They are looking for a way to estimate the number of KSK-2010 only clients forwarding to them.

Hrm. I don't think us giving that number will reflect reality, but let me look more.

--Paul Hoffman


More information about the ksk-rollover mailing list