DNSSEC adoption

Two different things, both worth knowing: whether a TLD is signed in the root, and how many of its registered domains are signed.

New gTLDs Legacy gTLDs All gTLDs
Signed legacy gTLDs
18
of 18 (100%)
Unsigned
0
no DS record in the root
Second-level signing
17
TLDs with zone data
A TLD being signed in the root says the registry supports DNSSEC. It says nothing about uptake: a signed TLD can have almost no signed registrations. The second column below is the one that measures actual adoption, and it needs zone data.

Largest legacy gTLDs and their signing status

TLD Domains Root signed Signed domainsRate
.museum 1,084 ✔ Yes 120
11.07%
.coop 8,284 ✔ Yes 238
2.87%
.jobs 10,862 ✔ Yes 211
1.94%
.aero 13,729 ✔ Yes 328
2.39%
.travel 28,518 ✔ Yes 700
2.45%
.xxx 35,613 ✔ Yes 1,098
3.08%
.tel 35,998 ✔ Yes 551
1.53%
.name 71,925 ✔ Yes 2,402
3.34%
.cat 116,630 ✔ Yes 13,043
11.18%
.mobi 216,262 ✔ Yes 9,155
4.23%
.asia 734,936 ✔ Yes 21,570
2.93%
.pro 1,142,189 ✔ Yes 54,458
4.77%
.biz 1,290,362 ✔ Yes 48,098
3.73%
.info 5,194,974 ✔ Yes 242,265
4.66%
.org 12,147,555 ✔ Yes 700,232
5.76%
.net 12,401,218 ✔ Yes 689,998
5.56%
.com 166,667,077 ✔ Yes 8,219,860
4.93%

Data currency. Domain counts on this page are from zone files dated and refresh daily. Registrar figures are from ICANN's monthly registry reports for May 2026, which ICANN publishes about three months in arrears; zone files contain no registrar information, so no fresher source exists. Full detail on methodology and live pipeline status.