How many people are actually performing DNSSEC validation on DNS queries? What is the true penetration of DNSSEC usage? While there are many sites offering DNSSEC statistics about the number of signed domains or TLDs, what kind of measurements can be done on the validation side of DNSSEC? And what is the performance impact of doing DNSSEC validation?
At the RIPE67 meeting Geoff Huston of APNIC gave an entertaining presentation around these exact questions based on measurements through a system of Flash-based web advertisements he has been using. His slides are available online and the video presentation runs about 28 minutes:
The information is certainly useful and we look forward to future presentations based on these measurements!