DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS records. It protects against DNS spoofing and cache poisoning by allowing resolvers to verify that DNS responses have not been tampered with.

Which TLD has the highest DNSSEC adoption?

.bank currently has the highest DNSSEC adoption rate at 49.9% across 4,743 domains.

What is the average DNSSEC adoption rate?

The current average DNSSEC adoption rate across all monitored TLDs is 8.6%. The top 5 TLDs by DNSSEC adoption are .bank (49.9%), .insurance (49.2%), .crs (48.9%), .kpn (48.8%), .statebank (48.7%).

Why is DNSSEC adoption important?

Without DNSSEC, attackers can forge DNS responses to redirect users to malicious websites. DNSSEC adoption is a key indicator of a TLD's security posture. Higher adoption means more domains under that extension are protected from DNS-based attacks.

DNSSEC Adoption by TLD

1,929 TLDs ranked by the percentage of domains with DNSSEC (DS records) enabled. .bank leads with 49.9% adoption.

Average DNSSEC Adoption

8.6%

Across all monitored TLDs

Leader

.bank

49.9% of domains signed

TLDs Ranked

200

200 with 10%+ adoption

#	TLD	DNSSEC Adoption	Total Domains
1	.bank	49.9%	4,743
2	.insurance	49.2%	321
3	.crs	48.9%	1,101
4	.kpn	48.8%	86
5	.statebank	48.7%	78
6	.sbi	48.1%	231
7	.toray	44.0%	175
8	.dhl	41.3%	160
9	.fox	40.4%	497
10	.sakura	40.0%	5
11	.nhk	39.7%	63
12	.jprs	39.6%	48
13	.scb	39.1%	69
14	.deloitte	38.7%	142
15	.shell	36.3%	91
16	.accenture	33.3%	3
17	.agakhan	33.3%	3
18	.alipay	33.3%	3
19	.analytics	33.3%	9
20	.barefoot	33.3%	3
21	.bestbuy	33.3%	3
22	.arab	33.3%	3
23	.blockbuster	33.3%	3
24	.boehringer	33.3%	3
25	.bofa	33.3%	3
26	.bom	33.3%	3
27	.cipriani	33.3%	3
28	.citadel	33.3%	3
29	.clinique	33.3%	3
30	.cruise	33.3%	3
31	.data	33.3%	3
32	.delta	33.3%	3
33	.dot	33.3%	3
34	.dtv	33.3%	3
35	.dvr	33.3%	3
36	.fedex	33.3%	3
37	.ferrari	33.3%	3
38	.fido	33.3%	3
39	.final	33.3%	3
40	.gallo	33.3%	3
41	.gallup	33.3%	3
42	.goodyear	33.3%	3
43	.hdfc	33.3%	3
44	.hkt	33.3%	3
45	.homedepot	33.3%	3
46	.icbc	33.3%	3
47	.jeep	33.3%	3
48	.juniper	33.3%	3
49	.kosher	33.3%	3
50	.lamer	33.3%	3
51	.lasalle	33.3%	3
52	.lacaixa	33.3%	3
53	.latino	33.3%	3
54	.lds	33.3%	3
55	.lplfinancial	33.3%	3
56	.mckinsey	33.3%	3
57	.mormon	33.3%	3
58	.progressive	33.3%	3
59	.reliance	33.3%	3
60	.obi	33.3%	3
61	.ollo	33.3%	3
62	.nowtv	33.3%	3
63	.nissay	33.3%	3
64	.pid	33.3%	3
65	.pnc	33.3%	3
66	.ott	33.3%	3
67	.pccw	33.3%	3
68	.phone	33.3%	3
69	.origins	33.3%	3
70	.richardli	33.3%	3
71	.ril	33.3%	3
72	.sling	33.3%	3
73	.scholarships	33.3%	3
74	.shouji	33.3%	3
75	.sina	33.3%	3
76	.thd	33.3%	3
77	.tiaa	33.3%	3
78	.tmall	33.3%	3
79	.taobao	33.3%	3
80	.viking	33.3%	3
81	.visa	33.3%	3
82	.weibo	33.3%	3
83	微博 (.xn--9krt00a)	33.3%	3
84	淡马锡 (.xn--b4w605ferd)	33.3%	3
85	電訊盈科 (.xn--fzys8d69uvgm)	33.3%	3
86	组织机构 (.xn--nqv7fs00ema)	33.3%	3
87	.公益 (.xn--55qw42g)	33.3%	3
88	Shangri-La (.xn--5su34j936bgsg)	33.3%	3
89	嘉里大酒店 (.xn--w4r85el8fhu5dnra)	33.3%	3
90	嘉里 (.xn--w4rs40l)	33.3%	3
91	.xihuan	33.3%	3
92	政务 (.xn--zfr164b)	33.3%	3
93	.gent	31.7%	5,416
94	.cisco	29.5%	61
95	.ovh	27.8%	115,820
96	.orange	27.8%	18
97	.frl	26.2%	13,657
98	.anquan	25.0%	4
99	.bcg	25.0%	4
100	.dish	25.0%	4
101	.hdfcbank	25.0%	4
102	.hughes	25.0%	4
103	.redumbrella	25.0%	4
104	.ping	25.0%	8
105	.star	25.0%	4
106	.ups	25.0%	4
107	.travelersinsurance	25.0%	4
108	.trv	25.0%	4
109	.vermögensberater (.xn--vermgensberater-ctb)	25.0%	4
110	.coupons	24.8%	9,323
111	.politie	24.0%	25
112	.corsica	23.9%	3,032
113	.christmas	23.2%	10,096
114	.vlaanderen	22.2%	6,641
115	.vana	21.7%	60
116	.tattoo	21.0%	9,310
117	.brussels	20.7%	10,057
118	.alsace	20.6%	2,934
119	.airtel	20.0%	5
120	.akdn	20.0%	5
121	.americanfamily	20.0%	5
122	.athleta	20.0%	5
123	.banamex	20.0%	5
124	.baseball	20.0%	5
125	.bharti	20.0%	5
126	.beats	20.0%	5
127	.aramco	20.0%	5
128	.calvinklein	20.0%	5
129	.capitalone	20.0%	5
130	.booking	20.0%	5
131	.cbre	20.0%	5
132	.dds	20.0%	5
133	.farmers	20.0%	5
134	.frontier	20.0%	5
135	.gap	20.0%	5
136	.george	20.0%	5
137	.grocery	20.0%	5
138	.homegoods	20.0%	5
139	.homesense	20.0%	5
140	.hotels	20.0%	5
141	.ibm	20.0%	5
142	.intuit	20.0%	5
143	.lifeinsurance	20.0%	5
144	.lpl	20.0%	5
145	.marshalls	20.0%	5
146	.merckmsd	20.0%	5
147	.mls	20.0%	5
148	.mit	20.0%	5
149	.mint	20.0%	5
150	.moto	20.0%	5
151	.msd	20.0%	5
152	.nba	20.0%	5
153	.mtr	20.0%	5
154	.netflix	20.0%	5
155	.pwc	20.0%	5
156	.norton	20.0%	5
157	.pohl	20.0%	5
158	.pars	20.0%	5
159	.open	20.0%	5
160	.oracle	20.0%	5
161	.safety	20.0%	5
162	.samsclub	20.0%	5
163	.shia	20.0%	5
164	.staples	20.0%	5
165	.tjmaxx	20.0%	5
166	.tjx	20.0%	5
167	.tkmaxx	20.0%	5
168	.tci	20.0%	5
169	.tdk	20.0%	5
170	.virgin	20.0%	5
171	.walmart	20.0%	5
172	.weather	20.0%	5
173	.weatherchannel	20.0%	5
174	.winners	20.0%	5
175	.trust	20.0%	65
176	.travelers	20.0%	5
177	Католик (.xn--80aqecdr1a)	20.0%	5
178	أرامكو (.xn--mgba3a3ejt)	20.0%	5
179	كاثوليك (.xn--mgbi4ecexp)	20.0%	5
180	همراه (.xn--mgbt3dhd)	20.0%	5
181	عرب (.xn--ngbrx)	20.0%	5
182	.天主教 (.xn--tiq49xqyj)	20.0%	5
183	.vermögensberatung (.xn--vermgensberatung-pwb)	20.0%	5
184	.wtc	20.0%	5
185	.xerox	20.0%	5
186	.ntt	19.0%	21
187	.page	17.8%	70,883
188	.paris	17.8%	22,290
189	.barclaycard	17.1%	35
190	.caravan	16.7%	6
191	.catholic	16.7%	30
192	.ftr	16.7%	6
193	.imamat	16.7%	6
194	.nfl	16.7%	6
195	.olayan	16.7%	6
196	.olayangroup	16.7%	6
197	.nokia	16.7%	6
198	.rogers	16.7%	6
199	.sas	16.7%	6
200	.tab	16.7%	6

What is DNSSEC?

DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS records, allowing resolvers to verify that responses have not been tampered with. It protects against DNS spoofing and cache poisoning attacks — where an attacker forges DNS responses to redirect users to malicious sites.

The adoption rate measures what percentage of domains under a given TLD have published DS (Delegation Signer) records, indicating an active DNSSEC chain of trust. Higher adoption means more domains under that extension are cryptographically protected.

Key Findings

.bank leads all TLDs with a 49.9% DNSSEC adoption rate across 4,743 domains. The global average sits at 8.6%, meaning the vast majority of domains remain unsigned.

Sponsored and regulated TLDs (like .bank and .insurance) tend to have higher DNSSEC adoption due to registry-level requirements and the security-conscious nature of their registrants.

All Rankings TLD Size Rankings Provider Rankings TLD Directory

Data updated daily