Hacker News new | past | comments | ask | show | jobs | submit login

Regarding DNSSEC adoption, for US names: it's less than 2%, just in terms of raw signed domains. It's lower if you're looking at adoption among popular domains.



The article claims it’s about 50% globally. So if, as you say, the US only has 2%, is that an argument against DNSSEC? That an argumentum ad populum.


It's not about 50% globally. It's like 50% of .SE, which is itself less than 25% as large as .INFO. He's guessing, and he's wrong. That's the point of my comment. I don't care what you do with the observation; he brought it up, and he's way off.

(I don't think it's weird that he's way off; I'm not criticizing Mockapetris, just correcting the stat. But your vehemence demands a direct response from me, and I'll provide it.)


I don’t know what you mean by “vehemence”, but I note that even though you said it “demands a direct reponse”, you didn’t actually answer the question.


I'm sorry, I thought I was clear. No, pointing out that Mockapetris' guess of 50% global adoption of DNSSEC is wrong is not an "argumentum ad populum". It is, as I said, simply an observation that the statistic he is venturing is wrong.


Source, as of 2020?


Not sure where he's getting his numbers from, but check out: DNSSEC validation, by country from APNIC https://stats.labs.apnic.net/dnssec


That's the number of validations, which is effectively a measure of the percentage of people using centralized resolver services that do DNSSEC validation. The figure of merit is the number of signed zones, and, in particular, the percentage of popular zones that are signed (you pick the popularity metric; whatever you choose, the percentage will be extremely low, unless it's "most popular schools and government agencies").


dnssec-tools. (Or, for popular zones, any list of popular domains and "host -t ds").




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: