DNSSEC adoption
Two different things, both worth knowing: whether a TLD is signed in the root, and how many of its registered domains are signed.
Signed legacy gTLDs
18
Unsigned
0
Second-level signing
14
A TLD being signed in the root says the registry supports DNSSEC. It says nothing
about uptake: a signed TLD can have almost no signed registrations. The second
column below is the one that measures actual adoption, and it needs zone data.
Largest legacy gTLDs and their signing status
| TLD | Domains | Root signed | Signed domains | Rate |
|---|---|---|---|---|
| .net | 12,358,651 | ✔ Yes | 671,432 | |
| .org | 12,075,445 | ✔ Yes | 677,397 | |
| .info | 5,237,966 | ✔ Yes | 246,835 | |
| .biz | 1,277,823 | ✔ Yes | 44,134 | |
| .pro | 1,153,911 | ✔ Yes | 50,715 | |
| .asia | 683,833 | ✔ Yes | 16,878 | |
| .mobi | 253,128 | ✔ Yes | 24,983 | |
| .cat | 115,725 | ✔ Yes | 12,836 | |
| .tel | 35,948 | ✔ Yes | 543 | |
| .xxx | 35,792 | ✔ Yes | 1,084 | |
| .travel | 28,169 | ✔ Yes | 685 | |
| .aero | 13,653 | ✔ Yes | 311 | |
| .jobs | 10,861 | ✔ Yes | 211 | |
| .coop | 8,270 | ✔ Yes | 237 |
Data currency. Domain counts on this page are from zone files dated and refresh daily. Registrar figures are from ICANN's monthly registry reports for April 2026, which ICANN publishes about three months in arrears; zone files contain no registrar information, so no fresher source exists. Full detail on methodology and live pipeline status.