Donate
‹ Back

DNSSEC Deployment Maps

The following maps provide a view into global DNSSEC deployment and break the deployment status of top-level domains (TLDs) out into the following five categories:

  • Experimental – Internal experimentation announced or observed
  • Announced – Public commitment to deploy
  • Partial – Zone is signed but not in operation (no DS in root)
  • DS in Root – Zone is signed and its DS has been published
  • Operational – Accepting signed delegations and DS in root

These maps are a bit different from other DNSSEC statistics sites in that they contain both factual, observed information (for the “DS in Root” and “Operational” states) and also information based on news reports, presentations, and other collected data (the first three states).  For more information about how we track the deployment status of TLDs, please read our page on the 5 Stages of DNSSEC Deployment.

The maps and associated data files track both the DNSSEC status of country-code TLDs (ccTLDs), shown in the maps, and also generic TLDs (gTLDs), shown in the comma-separated value (CSV) files.

These maps are produced by the Internet Society Deploy360 Programme based on a database and programs originally developed by Shinkuro, Inc.

You are free to use these maps in any presentations, websites, or other materials subject to a Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License. (Rough translation: you need to credit us and you can’t sell the maps.)

NOTE: The boundaries and names shown on this site do not imply the expression of any opinion whatsoever on the part of the Internet Society concerning the legal status of any country, territory, city or area of its authorities. Dotted and dashed lines on maps represent approximate border lines for which there may not yet be full agreement.

TO RECEIVE THESE MAPS WEEKLY VIA EMAIL when they are generated each Monday, please subscribe here: https://elists.isoc.org/mailman/listinfo/dnssec-maps

TO VIEW THE LATEST MAPS AND CSV FILES, please visit the archives for the dnssec-maps list. The list always has the most up-to-date maps.  We periodically update the page below with new maps where there have been significant changes, but the list always has the most recent maps and files.

The individual maps as of 12 March 2018 are (click/tap each map for a larger image):

The maps displayed on this page are only updated periodically. If you would like to receive the maps when they are generated each week, you can subscribe to the “dnssec-maps” mailing list.  The most up-to-date maps are always those that are sent to the mailing list.

Please note that additional statistics and maps about DNSSEC deployment may be found from our DNSSEC Statistics page.

‹ Back