Skip to main content
DNS Checker(beta)

DNSSEC Adoption by TLD

1,436 TLDs ranked by the percentage of domains with DNSSEC (DS records) enabled. .se leads with 60.6% adoption.

Average DNSSEC Adoption

9.1%

Across all monitored TLDs

Leader

.se

60.6% of domains signed

TLDs Ranked

200

200 with 10%+ adoption

#
TLD
DNSSEC Adoption
1.se
60.6%
2.nu
56.7%
3.ch
53.0%
4.bank
49.9%
5.insurance
49.2%
6.crs
48.7%
7.kpn
48.3%
8.statebank
48.1%
9.sbi
47.7%
10.christmas
47.1%
11.toray
45.3%
12.fox
41.7%
13.dhl
40.7%
14.sakura
40.0%
15.zappos
40.0%
16.nhk
39.7%
17.scb
39.1%
18.deloitte
38.7%
19.jprs
38.0%
20.shell
36.3%
21.surf
33.4%
22.barefoot
33.3%
23.bestbuy
33.3%
24.boehringer
33.3%
25.bofa
33.3%
26.bom
33.3%
27.accenture
33.3%
28.agakhan
33.3%
29.alipay
33.3%
30.analytics
33.3%
31.cipriani
33.3%
32.citadel
33.3%
33.clinique
33.3%
34.arab
33.3%
35.coupon
33.3%
36.cruise
33.3%
37.delta
33.3%
38.fedex
33.3%
39.ferrari
33.3%
40.fido
33.3%
41.final
33.3%
42.gallo
33.3%
43.gallup
33.3%
44.goodyear
33.3%
45.hdfc
33.3%
46.hkt
33.3%
47.homedepot
33.3%
48.icbc
33.3%
49.jeep
33.3%
50.juniper
33.3%
51.kosher
33.3%
52.lacaixa
33.3%
53.lamer
33.3%
54.lasalle
33.3%
55.lds
33.3%
56.progressive
33.3%
57.reliance
33.3%
58.richardli
33.3%
59.ril
33.3%
60.scholarships
33.3%
61.shouji
33.3%
62.sina
33.3%
63.song
33.3%
64.taobao
33.3%
65.thd
33.3%
66.tiaa
33.3%
67.tmall
33.3%
68.viking
33.3%
69.lplfinancial
33.3%
70.mckinsey
33.3%
71.mormon
33.3%
72.origins
33.3%
73.pccw
33.3%
74.pnc
33.3%
75.nissay
33.3%
76.nowtv
33.3%
77.obi
33.3%
78.visa
33.3%
79.weibo
33.3%
80.xihuan
33.3%
81.公益 (.xn--55qw42g)
33.3%
82Shangri-La (.xn--5su34j936bgsg)
33.3%
83微博 (.xn--9krt00a)
33.3%
84淡马锡 (.xn--b4w605ferd)
33.3%
85ポイント (.xn--eckvdtc9d)
33.3%
86電訊盈科 (.xn--fzys8d69uvgm)
33.3%
87通販 (.xn--gk3at1e)
33.3%
88组织机构 (.xn--nqv7fs00ema)
33.3%
89嘉里大酒店 (.xn--w4r85el8fhu5dnra)
33.3%
90嘉里 (.xn--w4rs40l)
33.3%
91政务 (.xn--zfr164b)
33.3%
92.zero
33.3%
93.li
32.9%
94.gent
31.9%
95.garden
31.6%
96.cisco
30.2%
97.ovh
27.6%
98.orange
26.3%
99.frl
25.8%
100.tattoo
25.3%
101.bcg
25.0%
102.anquan
25.0%
103.hdfcbank
25.0%
104.hughes
25.0%
105.redumbrella
25.0%
106.star
25.0%
107.travelersinsurance
25.0%
108.trv
25.0%
109.ups
25.0%
110.vermögensberater (.xn--vermgensberater-ctb)
25.0%
111.coupons
24.1%
112.politie
24.0%
113.corsica
23.7%
114.vlaanderen
22.3%
115.ping
22.2%
116.brussels
21.3%
117.vana
21.3%
118.ntt
21.1%
119.alsace
20.5%
120.mtr
20.0%
121.banamex
20.0%
122.baseball
20.0%
123.beats
20.0%
124.bharti
20.0%
125.blockbuster
20.0%
126.airtel
20.0%
127.akdn
20.0%
128.americanfamily
20.0%
129.book
20.0%
130.booking
20.0%
131.buy
20.0%
132.call
20.0%
133.calvinklein
20.0%
134.circle
20.0%
135.aramco
20.0%
136.athleta
20.0%
137.author
20.0%
138.cbre
20.0%
139.data
20.0%
140.dds
20.0%
141.dtv
20.0%
142.dvr
20.0%
143.farmers
20.0%
144.fire
20.0%
145.frontier
20.0%
146.gap
20.0%
147.george
20.0%
148.got
20.0%
149.grocery
20.0%
150.homegoods
20.0%
151.homesense
20.0%
152.hotels
20.0%
153.ibm
20.0%
154.imdb
20.0%
155.intuit
20.0%
156.jot
20.0%
157.joy
20.0%
158.kindle
20.0%
159.pwc
20.0%
160.read
20.0%
161.room
20.0%
162.safe
20.0%
163.safety
20.0%
164.samsclub
20.0%
165.save
20.0%
166.secure
20.0%
167.shia
20.0%
168.silk
20.0%
169.sling
20.0%
170.smile
20.0%
171.staples
20.0%
172.tci
20.0%
173.tdk
20.0%
174.tjmaxx
20.0%
175.tjx
20.0%
176.tkmaxx
20.0%
177.travelers
20.0%
178.tunes
20.0%
179.tushu
20.0%
180.like
20.0%
181.lpl
20.0%
182.marshalls
20.0%
183.merckmsd
20.0%
184.mint
20.0%
185.mit
20.0%
186.mls
20.0%
187.moto
20.0%
188.msd
20.0%
189.nba
20.0%
190.ott
20.0%
191.pars
20.0%
192.phone
20.0%
193.pid
20.0%
194.pin
20.0%
195.pohl
20.0%
196.netflix
20.0%
197.norton
20.0%
198.ollo
20.0%
199.open
20.0%
200.oracle
20.0%

What is DNSSEC?

DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS records, allowing resolvers to verify that responses have not been tampered with. It protects against DNS spoofing and cache poisoning attacks — where an attacker forges DNS responses to redirect users to malicious sites.

The adoption rate measures what percentage of domains under a given TLD have published DS (Delegation Signer) records, indicating an active DNSSEC chain of trust. Higher adoption means more domains under that extension are cryptographically protected.

Key Findings

.se leads all TLDs with a 60.6% DNSSEC adoption rate across 1,409,241 domains. The global average sits at 9.1%, meaning the vast majority of domains remain unsigned.

Only 3 TLDs have surpassed the 50% adoption mark. 200 TLDs have at least 10% adoption.

Sponsored and regulated TLDs (like .bank and .insurance) tend to have higher DNSSEC adoption due to registry-level requirements and the security-conscious nature of their registrants.

Data updated daily