1 Here are some additional preliminary results from my root response
2 size research. These results were from a zone signed with a 2048-bit
5 Note that different key rollover strategies were not researched here
6 (I have a separate set of results for that), so some DNSKEY responses
7 would truncate under some rollover scenarios at this ZSK size.
9 Referral sizes (Maximum truncation sizes):
10 range [629 - 845] min: NF/NS, max: AN/NS
17 Referral sizes (Maximum overall sizes):
18 range [661 - 1185] min: NF/NS, max: AERO/NS
29 NXDOMAIN sizes (Maximum truncation sizes):
30 range [953 - 1298] min: @_/A, max: XN--HGBK6AJ7F53BBA_/A
35 Other response sizes (Full response sizes):
36 range [410 - 2418] min: NF/ANY, max: @/ANY
50 Again, the two responses over 1500 are ./RRSIG and ./ANY: