DNSSEC adoption

Two different things, both worth knowing: whether a TLD is signed in the root, and how many of its registered domains are signed.

New gTLDs Legacy gTLDs All gTLDs
Signed legacy gTLDs
18
of 18 (100%)
Unsigned
0
no DS record in the root
Second-level signing
17
TLDs with zone data
A TLD being signed in the root says the registry supports DNSSEC. It says nothing about uptake: a signed TLD can have almost no signed registrations. The second column below is the one that measures actual adoption, and it needs zone data.

Largest legacy gTLDs and their signing status

TLD Domains Root signed Signed domainsRate
.museum 1,127 ✔ Yes 119
10.56%
.coop 8,307 ✔ Yes 244
2.94%
.jobs 10,887 ✔ Yes 214
1.97%
.aero 13,914 ✔ Yes 349
2.51%
.travel 28,870 ✔ Yes 737
2.55%
.xxx 35,825 ✔ Yes 1,089
3.04%
.tel 35,938 ✔ Yes 588
1.64%
.name 72,000 ✔ Yes 2,464
3.42%
.cat 118,210 ✔ Yes 13,495
11.42%
.mobi 206,413 ✔ Yes 4,565
2.21%
.asia 757,194 ✔ Yes 20,066
2.65%
.pro 1,171,537 ✔ Yes 59,067
5.04%
.biz 1,299,244 ✔ Yes 48,417
3.73%
.info 5,011,104 ✔ Yes 225,038
4.49%
.org 12,245,371 ✔ Yes 733,922
5.99%
.net 12,457,110 ✔ Yes 722,519
5.8%
.com 168,848,304 ✔ Yes 8,751,170
5.18%

Data currency. Domain counts on this page are from zone files dated and refresh daily. Registrar figures are from ICANN's monthly registry reports for July 2026, which ICANN publishes about three months in arrears; zone files contain no registrar information, so no fresher source exists. Full detail on methodology and live pipeline status.