dnssec measurement aptld 71
TRANSCRIPT
Worldwide DNSSEC ,
Validating, Uses Google
0
10
20
30
40
50
60
70
80
90
100
20
14
-01-1
22014
-03-0
72014
-04-3
02014
-06-2
32014
-08-2
52014
-10-1
92014
-12-1
220
15
-02-0
52015
-03-3
12015
-05-2
82015
-07-2
12015
-09-1
32015
-11-0
62015
-12-3
020
16
-02-2
22016
-04-1
62016
-06-1
22016
-08-0
52016
-09-2
82016
-11-2
12017
-01-1
4
% o
f S
am
ple
s
Validating
Uses Google
There are many DNS
measurements• … This one is ours (APNIC)
– Since 2014 in bulk
– Geoff Huston (Chief Scientist, APNIC Labs) significant body of work• (I’m just using his data, conclusions mine, all the work is his!)
• We focus on end-user capability in this test– We are not exploring which zones are signed
– We are not exploring which zones use which crypto alg
• We use a randomized sample method which distributes well – Worldwide
– Inside ASN (competing ISPs) reflecting relative share of end user eyeballs
DNSSEC is happening
• One to n factor of deployment– Edit the DHCP configuration and enable large customer bases in
one act
– In-place upgrades of DNS software is turning functionality on
• Adoption of google public dns (pDNS) can bring DNSSEC to the door
• Significantly easier to deploy/control than IPv6– Next to no significant CPE/CAN cost
• In the CPE, >512b packets has consequences, ACL may need re-tuning
• Increase in TC=1 moving traffic to TCP
Some questions to ask
• Are my users aware DNSSEC exists?
• If I have DNSSEC enabled, is it *modern* DNSSEC?– Do I implement RFC5011 key rollover signalling
– …or did I hand install a trust anchor which is going to go stale later this year?
– Does my server understand algorithm 13 and modern crypto?
• If you see high volumes of pDNS (8.8.8.8)– Is this coming from a location you have reliable connectivity to
– … or did you just make a lot of your users depend on a long-line service?
– (Island states: where is your critical infrastructure named, and which side of the cable, or VSAT is that DNS service?)
How we measure• Recruited random users in adverts which are HTML5 JavaScript
– Requests unique, uncached DNS labels
– Validly signed,Badly signed (if fetched badly signed, not really validating)
– Signed with Alg. 13 (ecDSA)
– Long responses,IPv6 only &c
• Look at which named resources are fetched– Identified relationship between end-user and the last resolver in the chain
before the authority NS for the zones
• Recognize which pDNS endpoint addresses are being used (google list)
• 10,000,000 samples/day worldwide– Its not infalliable
– High variability
– It’s a sample. You may have conflicting data. Science is fun!
Whats going on out there in
APTLD?• (all APTLD member economies are at the end
in an appendix)
• Lets look at some specific cases, to explore the kinds of things we see in DNS these days
• All information shown here is derived from our web pages– https://stats.labs.apnic.net/dnssec/VN (for example)– Includes timeline graph, ASN listing, samplecounts.
DNSSEC in AF, Validating, Uses
0
10
20
30
40
50
60
70
80
90
100
20
14
-01-1
22014
-03-0
72014
-04-3
02014
-06-2
32014
-08-2
52014
-10-1
92014
-12-1
22015
-02-0
52015
-03-3
12015
-05-2
820
15
-07-2
12015
-09-1
32015
-11-0
82016
-01-0
12016
-02-2
42016
-04-1
82016
-06-1
42016
-08-0
72016
-09-3
020
16
-11-2
32017
-01-2
4
% o
f S
am
ple
s
Validating
Uses Google
Afghanistan
• pDNS and Validation strongly coupled.
• Suggests most, if not all the validation comes from pDNS configuration
• Higher pDNS than Validating– Has resolver set which includes one validating, one
non-validating
– DNSSEC bad sign -> SERVFAIL -> goes to next NS
• Reasonably steady-state– Is this a dominant ISP, or perhaps a few ISPs?
DNSSEC in NP, Validating, Uses
0
10
20
30
40
50
60
70
80
90
100
20
14
-01-1
22014
-03-0
62014
-04-2
82014
-06-2
02014
-08-2
12014
-10-1
42014
-12-0
62015
-01-2
92015
-03-2
32015
-05-1
82015
-07-1
12015
-09-0
220
15
-10-2
62015
-12-1
92016
-02-1
02016
-04-0
32016
-05-2
62016
-07-2
12016
-09-1
220
16
-11-0
42017
-01-1
0
% o
f S
am
ple
s
Validating
Uses Google
Nepal
• pDNS and Validation not coupled.
• Suggests most, if not all the validation comes from independent configuration of validating resolvers
• Higher Validating than pDNS– Some ISPS have resolver set which includes one
validating, one non-validating
• Reasonably steady-state– Well coordinated Internet Economy, frequent trainings,
engaged– Local resolver services build built out to current
specification
– Not dependent on pDNS (although few risks of using it)
DNSSEC in TV, Validating, Uses
0
10
20
30
40
50
60
70
80
90
100
2014
-01-1
22014
-02-1
520
14
-03-2
12014
-04-2
42014
-05-2
82014
-07-0
220
14
-08-1
32014
-09-1
72014
-10-2
12014
-11-2
420
14
-12-2
82015
-02-0
12015
-03-0
72015
-04-1
020
15
-05-1
72015
-06-2
82015
-09-1
72016
-02-0
92016
-03-3
02016
-08-0
52016
-10-0
8
% o
f S
am
ple
s
Validating
Uses Google
Tuvalu
• pDNS and Validation not coupled.
• Higher pDNS than Validating– Most ISPS have resolver set which includes one
validating, one non-validating
• Not steady-state– Smaller economy, less competition, so measurement
strongly affected by individual ISP changes of configuration
• Exposure risk: where is the pDNS– Looks like offshore DNS has been a concern, has
come and gone over time.
DNSSEC in VN, Validating, Uses
0
10
20
30
40
50
60
70
80
90
100
20
14
-01-1
220
14
-03-0
720
14
-04-3
02014
-06-2
32014
-08-2
52014
-10-1
92014
-12-1
22015
-02-0
52015
-03-3
12015
-05-2
82015
-07-2
12015
-09-1
32015
-11-0
62015
-12-3
12016
-02-2
32016
-04-1
72016
-06-1
32016
-08-0
62016
-09-2
92016
-11-2
22017
-01-1
5
% o
f S
am
ple
s
Validating
Uses Google
Vietnam
• pDNS and Validation strongly coupled.
• Higher pDNS than Validating
– Most ISPS have resolver set which includes one
validating, one non-validating
• Reasonably steady-state
• Stable DNS
– Well connected economy, many peerings, pDNS
intensity poses few risks if any.
– Maybe a campaign to enable DNSSEC to the users?
Conclusions
• End user DNSSEC capability is highly variable by economy
• No strong determinant aside from ISP choice of configuration
• Market size influences stability, concentration of DNSSEC capability
• Use of pDNS is variable– For some economies, may expose risks of offshore DNS dependency
• Key roll is coming this year: – RFC5011, >512b packet handling, TC=1, TCP service issues to
consider
• DNSSEC is still worth it– Huge consumer benefit from trustable names. Low cost deployment to
the masses.
Explore the data
https://stats.labs.apnic.net/
17
Appendix: APTLD
economies(alphabetical order, 36 economies)
DNSSEC in AE, Validating, Uses
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
720
15
-09-2
22015
-11-2
92016
-02-0
42016
-04-1
12016
-06-2
02016
-08-2
62016
-11-0
12017
-01-0
7
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in AF, Validating, Uses
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
220
14
-03-1
920
14
-05-2
42014
-08-0
72014
-10-1
32014
-12-1
82015
-02-2
32015
-04-3
02015
-07-0
92015
-09-1
32015
-11-2
02016
-01-2
52016
-03-3
12016
-06-0
52016
-08-1
32016
-10-1
820
16
-12-2
4
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in AU, Validating, Uses
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
920
15
-07-1
72015
-09-2
22015
-11-2
82016
-02-0
32016
-04-1
02016
-06-1
92016
-08-2
52016
-10-3
120
17
-01-0
6
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in CC, Validating, Uses
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-02-1
42014
-03-1
92014
-04-2
12014
-05-2
42014
-06-2
620
14
-08-0
72014
-09-0
920
14
-10-1
32014
-11-1
520
14
-12-1
82015
-01-2
12015
-02-2
32015
-03-2
82015
-04-3
02015
-06-0
62016
-08-2
7
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in CN, Validating, Uses
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
720
15
-09-2
22015
-11-2
92016
-02-0
42016
-04-1
12016
-06-2
02016
-08-2
62016
-11-0
12017
-01-0
7
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in FJ, Validating, Uses
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-03-1
92014
-05-2
420
14
-08-0
72014
-10-1
32014
-12-1
82015
-02-2
320
15
-04-3
02015
-07-0
92015
-09-1
32015
-11-2
02016
-01-2
62016
-04-0
12016
-06-0
920
16
-08-1
42016
-10-1
92017
-01-0
7
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in HK, Validating, Uses
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
720
15
-09-2
22015
-11-2
92016
-02-0
42016
-04-1
12016
-06-2
02016
-08-2
62016
-11-0
12017
-01-0
7
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in ID, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
720
15
-09-2
22015
-11-2
92016
-02-0
42016
-04-1
12016
-06-2
02016
-08-2
62016
-11-0
12017
-01-0
7
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in IN, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
920
15
-07-1
72015
-09-2
22015
-11-2
82016
-02-0
32016
-04-1
02016
-06-1
92016
-08-2
52016
-10-3
120
17
-01-0
6
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in IQ, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
620
14
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
72015
-09-2
22015
-11-3
02016
-02-0
52016
-04-1
22016
-06-2
120
16
-08-2
72016
-11-0
22017
-01-0
8
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in IR, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
620
14
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
72015
-09-2
22015
-11-3
02016
-02-0
52016
-04-1
22016
-06-2
120
16
-08-2
72016
-11-0
22017
-01-0
8
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in JO, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
620
14
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
72015
-09-2
22015
-11-3
02016
-02-0
52016
-04-1
22016
-06-2
120
16
-08-2
72016
-11-0
22017
-01-0
8
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in JP, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
920
15
-07-1
72015
-09-2
22015
-11-2
82016
-02-0
32016
-04-1
02016
-06-1
92016
-08-2
52016
-10-3
120
17
-01-0
6
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in KR, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
920
15
-07-1
72015
-09-2
22015
-11-2
82016
-02-0
32016
-04-1
02016
-06-1
92016
-08-2
52016
-10-3
120
17
-01-0
6
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in LK, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-03-1
92014
-05-2
42014
-08-0
72014
-10-1
32014
-12-1
82015
-02-2
320
15
-04-3
02015
-07-0
92015
-09-1
320
15
-11-1
92016
-01-2
42016
-03-3
02016
-06-0
42016
-08-1
22016
-10-1
72016
-12-2
3
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in MN, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-03-1
92014
-05-2
42014
-08-0
72014
-10-1
32014
-12-1
82015
-02-2
32015
-04-3
02015
-07-0
92015
-09-1
320
15
-11-2
42016
-01-2
92016
-04-0
42016
-06-1
22016
-08-1
72016
-10-2
22017
-01-1
0
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in MO, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
620
14
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
72015
-09-2
22015
-11-3
02016
-02-0
52016
-04-1
22016
-06-2
120
16
-08-2
72016
-11-0
22017
-01-0
8
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in MY, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
720
15
-09-2
22015
-11-2
92016
-02-0
42016
-04-1
12016
-06-2
02016
-08-2
62016
-11-0
12017
-01-0
7
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in NC, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-03-1
82014
-05-2
22014
-07-2
72014
-10-0
920
14
-12-1
32015
-02-1
72015
-04-2
32015
-07-0
12015
-09-0
42015
-11-1
420
16
-01-1
92016
-03-2
42016
-05-2
82016
-08-0
42016
-10-0
82016
-12-1
2
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in NP, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-03-1
92014
-05-2
42014
-08-0
72014
-10-1
32014
-12-1
82015
-02-2
32015
-04-3
02015
-07-0
92015
-09-1
32015
-11-2
02016
-01-2
52016
-03-3
12016
-06-0
52016
-08-1
32016
-10-1
82017
-01-0
6
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in NR, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-03-0
82014
-05-0
220
14
-06-2
62014
-08-2
92014
-10-2
42014
-12-1
82015
-02-1
220
15
-04-0
82015
-06-0
62015
-08-2
22016
-01-0
92016
-04-0
720
16
-06-2
62016
-08-2
82016
-11-0
22017
-01-1
9
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in NU, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-02-2
32014
-04-0
62014
-05-1
82014
-06-2
92014
-08-1
92014
-10-0
12014
-11-1
22014
-12-2
42015
-02-0
52015
-03-1
92015
-04-3
02015
-06-1
52015
-11-2
52016
-05-1
82016
-08-0
62016
-10-1
7
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in NZ, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
920
15
-07-1
72015
-09-2
22015
-11-2
82016
-02-0
32016
-04-1
02016
-06-1
92016
-08-2
52016
-10-3
120
17
-01-0
6
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in OM, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
620
14
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
72015
-09-2
22015
-11-3
02016
-02-0
52016
-04-1
22016
-06-2
120
16
-08-2
72016
-11-0
22017
-01-0
8
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in QA, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
620
14
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
72015
-09-2
22015
-11-3
02016
-02-0
52016
-04-1
22016
-06-2
120
16
-08-2
72016
-11-0
22017
-01-0
8
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in SA, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
720
15
-09-2
22015
-11-2
92016
-02-0
42016
-04-1
12016
-06-2
02016
-08-2
62016
-11-0
12017
-01-0
7
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in SB, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-03-1
82014
-05-2
22014
-07-2
720
14
-10-0
92014
-12-1
32015
-02-1
72015
-04-2
32015
-07-0
22015
-09-0
52015
-11-1
52016
-01-2
02016
-03-2
52016
-05-2
920
16
-08-0
52016
-10-0
92016
-12-1
4
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in SG, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
720
15
-09-2
22015
-11-2
92016
-02-0
42016
-04-1
12016
-06-2
02016
-08-2
62016
-11-0
12017
-01-0
7
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in TH, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-03-1
92014
-05-2
42014
-08-0
72014
-10-1
32014
-12-1
82015
-02-2
32015
-04-3
02015
-07-0
92015
-09-1
32015
-11-1
92016
-01-2
420
16
-03-3
02016
-06-0
42016
-08-1
22016
-10-1
72016
-12-2
2
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in TJ, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
720
14
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
72015
-09-2
220
15
-11-3
02016
-02-0
62016
-04-1
32016
-06-2
22016
-08-2
820
16
-11-0
32017
-01-0
9
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in TK, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-02-1
52014
-03-2
12014
-04-2
42014
-05-2
82014
-07-0
22014
-08-1
32014
-09-1
720
14
-10-2
12014
-11-2
42014
-12-2
82015
-02-0
12015
-03-0
72015
-04-1
02015
-05-1
72015
-07-1
12016
-09-0
1
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in TV, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-02-2
32014
-04-0
62014
-05-1
82014
-06-2
92014
-08-1
92014
-10-0
12014
-11-1
22014
-12-2
42015
-02-0
52015
-03-1
92015
-04-3
02015
-06-1
52015
-09-1
92016
-02-2
42016
-06-1
82016
-09-0
8
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in TW, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
920
15
-07-1
72015
-09-2
22015
-11-2
82016
-02-0
32016
-04-1
02016
-06-1
92016
-08-2
52016
-10-3
120
17
-01-0
6
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in VN, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
10020
14
-01-1
22014
-03-2
02014
-05-2
62014
-08-1
02014
-10-1
72014
-12-2
32015
-03-0
12015
-05-0
92015
-07-1
720
15
-09-2
22015
-11-2
92016
-02-0
42016
-04-1
12016
-06-2
02016
-08-2
62016
-11-0
12017
-01-0
7
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in WF, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
220
14
-03-1
42014
-05-1
42014
-07-1
52014
-09-2
32014
-11-2
320
15
-01-2
42015
-03-2
62015
-05-3
02015
-08-0
72015
-10-1
52015
-12-1
92016
-02-1
82016
-04-1
92016
-06-2
32016
-08-2
42016
-11-3
0
% o
f S
am
ple
s
Validating
Uses Google
DNSSEC in WS, Validating,
Uses Google
0
10
20
30
40
50
60
70
80
90
1002014
-01-1
22014
-03-1
92014
-05-2
420
14
-08-0
72014
-10-1
32014
-12-1
82015
-02-2
320
15
-04-3
02015
-07-1
02015
-09-1
42015
-11-2
52016
-01-3
12016
-04-0
62016
-06-1
420
16
-08-1
92016
-10-2
42017
-01-0
7
% o
f S
am
ple
s
Validating
Uses Google