DNSSEC adoption

Two different things, both worth knowing: whether a TLD is signed in the root, and how many of its registered domains are signed.

New gTLDs Legacy gTLDs All gTLDs
Signed legacy gTLDs
18
of 18 (100%)
Unsigned
0
no DS record in the root
Second-level signing
17
TLDs with zone data
A TLD being signed in the root says the registry supports DNSSEC. It says nothing about uptake: a signed TLD can have almost no signed registrations. The second column below is the one that measures actual adoption, and it needs zone data.

Largest legacy gTLDs and their signing status

TLD Domains Root signed Signed domainsRate
.com 167,741,166 ✔ Yes 8,490,918
5.06%
.net 12,437,017 ✔ Yes 707,407
5.69%
.org 12,200,122 ✔ Yes 716,557
5.87%
.info 5,139,602 ✔ Yes 231,236
4.5%
.biz 1,301,617 ✔ Yes 46,228
3.55%
.pro 1,147,256 ✔ Yes 52,605
4.59%
.asia 752,505 ✔ Yes 16,646
2.21%
.mobi 207,915 ✔ Yes 4,538
2.18%
.cat 117,721 ✔ Yes 13,322
11.32%
.name 72,061 ✔ Yes 2,440
3.39%
.tel 35,948 ✔ Yes 568
1.58%
.xxx 35,793 ✔ Yes 1,099
3.07%
.travel 28,741 ✔ Yes 719
2.5%
.aero 13,838 ✔ Yes 337
2.44%
.jobs 10,889 ✔ Yes 213
1.96%
.coop 8,315 ✔ Yes 241
2.9%
.museum 1,108 ✔ Yes 122
11.01%

Data currency. Domain counts on this page are from zone files dated and refresh daily. Registrar figures are from ICANN's monthly registry reports for June 2026, which ICANN publishes about three months in arrears; zone files contain no registrar information, so no fresher source exists. Full detail on methodology and live pipeline status.