DNSSEC Deployment Maps

The following maps provide a view into global DNSSEC deployment and break the deployment status of top-level domains (TLDs) out into the following five categories:

  • Experimental – Internal experimentation announced or observed
  • Announced – Public commitment to deploy
  • Partial – Zone is signed but not in operation (no DS in root)
  • DS in Root – Zone is signed and its DS has been published
  • Operational – Accepting signed delegations and DS in root

These maps are a bit different from other DNSSEC statistics sites in that they contain both factual, observed information (for the “DS in Root” and “Operational” states) and also information based on news reports, presentations and other collected data (the first three states).  For more information about how we track the deployment status of TLDs, please read our page on the 5 Stages of DNSSEC Deployment.

The maps and associated data files track both the DNSSEC status of country-code TLDs (ccTLDs), shown in the maps, and also generic TLDs (gTLDs), shown in the comma-separated value (CSV) files.

These maps are produced by the Internet Society Deploy360 Programme based on a database and programs originally developed by Shinkuro, Inc.

You are free to use these maps in any presentations, websites or other materials subject to a Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License. (Rough translation: you need to credit us and you can’t sell the maps.)

NOTE: The boundaries and names shown on this site do not imply the expression of any opinion whatsoever on the part of the Internet Society concerning the legal status of any country, territory, city or area of its authorities. Dotted and dashed lines on maps represent approximate border lines for which there may not yet be full agreement.

TO RECEIVE THESE MAPS VIA EMAIL when they are generated each Monday, please subscribe here:  https://elists.isoc.org/mailman/listinfo/dnssec-maps

TO VIEW THE LATEST MAPS AND CSV FILES, please visit the archives for the dnssec-maps list. The list always has the most up-to-date maps.  We periodically update the page below with new maps where there have been significant changes, but the list always has the most recent maps and files.


The individual maps as of 12 December 2016 are (click/tap each map for a larger image):

Global view - Dec 12, 2016

Africa view - Dec 12, 2016

Asia Pacific view - Dec 12, 2016

Europe view - Dec 12, 2016

LAC view - Dec 12, 2016

North America view - Dec 12, 2016

Feedback about these maps are welcome, either as a comment to this page or via email or our web form.

The maps displayed on this page will be updated periodically as new information becomes available.  If you would like to receive the maps whenever new versions are generated each week, you can now subscribe to the “dnssec-maps” mailing list.  The most up-to-date maps are always those that are sent to the mailing list.

Please note that additional statistics and maps about DNSSEC deployment may be found from our DNSSEC Statistics page.

Older Versions Of The Maps

Occasional older copies of the maps are retained here for a view into the past.

June 20, 2016

February 15, 2016

June 19, 2015

December 15, 2014

December 1, 2014

October 14, 2014

April 28, 2014

March 21, 2014

January 23, 2014

September 9, 2013

April 3, 2013

An animated map from April 3, 2013, is available to show the progression of DNSSEC deployment over time. Note that the “future” deployment is based upon information Shinkuro had received about plans by various ccTLDs to deploy DNSSEC but as those plans may change the future information should be viewed as a forecast rather than a definitive statement. (And note that the maps above have already changed this view.)

Click/tap on the image below to see a larger image with the animation:


April 1st, 2013 by | Posted in | 12 Comments

12 Responses to DNSSEC Deployment Maps

  1. […] part of our ongoing publishing of DNSSEC deployment maps showing visually the DNSSEC status of country-code top-level domains (ccTLDs), we also publish a […]

  2. […] Society’s DNSSEC Deployment Maps are now available as part of a larger set of Global Internet Maps from its annual Global Internet […]

  3. […] I’ve updated the page showing DNSSEC Deployment Maps over on the Deploy360 site.  The maps are generated each Monday and sent to a mailing list (to […]

  4. Mohammed Alhamed says:

    Dear webpage Admin,

    the maps are outdated. they need to be updated.

    Thank you

Leave a Reply

Your email address will not be published. Required fields are marked *