MoinQ:

DNSSEC/検証の普及について、ここに記述してください。

1. VERISIGN

http://validator-search.verisignlabs.com/

Methodology

We identify DNSSEC validators by observing the behavior of recursive name servers
when they send queries to our zone validatorsearch.verisignlabs.com.

We elicit retry behavior from validators by omitting signature records from an initial response. Subsequent responses contain the signatures necessary for validation.

A recursive name server that retries within a short period of time is marked as a validator.

Percentage of resolvers doing DNSSEC http://validator-search.verisignlabs.com/lastSeen/total.png

「DNSKEYのTTLを短くしておいて、問い合わせを待つ」のかと思ったのですが、違った。 -- ToshinoriMaeno 2017-08-12 07:16:35

2. APNIC

DNSSEC Validation Rate by country (%) https://stats.labs.apnic.net/dnssec?s=DNSSEC+Validating&d=Auto&w=7&t=Auto

これがどういう意味か(手法を使って推測したものか)は不明

-- ToshinoriMaeno 2017-08-12 00:41:30

https://stats.labs.apnic.net/dnssec/JP

Screenshot from 2017-08-12 09-44-26.png