DNSSEC adoption

Two different things, both worth knowing: whether a TLD is signed in the root, and how many of its registered domains are signed.

New gTLDs Legacy gTLDs All gTLDs
Signed legacy gTLDs
18
of 18 (100%)
Unsigned
0
no DS record in the root
Second-level signing
17
TLDs with zone data
A TLD being signed in the root says the registry supports DNSSEC. It says nothing about uptake: a signed TLD can have almost no signed registrations. The second column below is the one that measures actual adoption, and it needs zone data.

Largest legacy gTLDs and their signing status

TLD Domains Root signed Signed domainsRate
.com 166,618,200 ✔ Yes 8,219,860
4.93%
.net 12,399,279 ✔ Yes 689,998
5.56%
.org 12,145,506 ✔ Yes 700,232
5.76%
.info 5,201,458 ✔ Yes 242,265
4.66%
.biz 1,290,257 ✔ Yes 48,098
3.73%
.pro 1,142,246 ✔ Yes 54,458
4.77%
.asia 734,272 ✔ Yes 21,570
2.93%
.mobi 216,452 ✔ Yes 9,155
4.23%
.cat 116,563 ✔ Yes 13,043
11.18%
.name 71,912 ✔ Yes 2,402
3.34%
.tel 35,998 ✔ Yes 551
1.53%
.xxx 35,616 ✔ Yes 1,098
3.08%
.travel 28,501 ✔ Yes 700
2.45%
.aero 13,721 ✔ Yes 328
2.39%
.jobs 10,861 ✔ Yes 211
1.94%
.coop 8,282 ✔ Yes 238
2.87%
.museum 1,085 ✔ Yes 120
11.07%

Data currency. Domain counts on this page are from zone files dated and refresh daily. Registrar figures are from ICANN's monthly registry reports for May 2026, which ICANN publishes about three months in arrears; zone files contain no registrar information, so no fresher source exists. Full detail on methodology and live pipeline status.