According to the rfc 8624, ED25519 is recommended. But it still doesn’t mean that it’s usable in practicable way. 2022 many resolvers still lacked supporting it.
I also guess, once it got set up, no one cares about it anymore. And back in that time #ECDSA-P256 was probably the best choice. I was running in RSA and just took a look again when setting up the new infrastructure including dnssec-policy setup. I sticked to #ECDSA-P256 instead of #ED25519 now to make sure to have the best compatibility. Will do some more research and maybe switch at a later time again… :)
@gyptazy If you look at current live statistics, #ECDSA-P256 is used far more than #Ed25519. See https://stats.dnssec-tools.org/#/?dnssec_param_tab=0 and https://stats.dnssec-tools.org/#/?dnssec_param_tab=1 ; as for guidance, if not known, RFC 8624 should be a good start.
#Ed25519 or #ECDSA-P256 or still on some #RSA algorithms? Shorter key length is especially in DNS a benefit but still not all resolvers may be able to support this in 2024?!