1,936 TLDs ranked by the percentage of domains with DNSSEC (DS records) enabled. .se leads with 60.4% adoption.
Average DNSSEC Adoption
9.1%
Across all monitored TLDs
Leader
.se
60.4% of domains signed
TLDs Ranked
200
200 with 10%+ adoption
DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS records, allowing resolvers to verify that responses have not been tampered with. It protects against DNS spoofing and cache poisoning attacks — where an attacker forges DNS responses to redirect users to malicious sites.
The adoption rate measures what percentage of domains under a given TLD have published DS (Delegation Signer) records, indicating an active DNSSEC chain of trust. Higher adoption means more domains under that extension are cryptographically protected.
.se leads all TLDs with a 60.4% DNSSEC adoption rate across 1,402,054 domains. The global average sits at 9.1%, meaning the vast majority of domains remain unsigned.
Only 3 TLDs have surpassed the 50% adoption mark. 200 TLDs have at least 10% adoption.
Sponsored and regulated TLDs (like .bank and .insurance) tend to have higher DNSSEC adoption due to registry-level requirements and the security-conscious nature of their registrants.