DNSSEC Deployment Maps

The following maps provide a view into global DNSSEC deployment and break the deployment status of top-level domains (TLDs) out into the following six stages:

Experimental – Internal experimentation announced or observed
Announced – Public commitment to deploy
Partial – Zone is signed but not in operation (no DS in root)
DS in Root – Zone is signed and its DS has been published
Operational – Accepting signed delegations and DS in root
DS Automation – Automation of updates of DNSSEC keys

These maps are a bit different from other DNSSEC statistics sites in that they contain both factual, observed information (for the “DS in Root” and “Operational” states) and also information based on news reports, presentations, and other collected data (the first three states). For more information about how we track the deployment status of TLDs, please read our page on the 6 Stages of DNSSEC Deployment.

The maps and associated data files track the DNSSEC status of country-code TLDs (ccTLDs). These maps are produced by the Internet Society based on a database and programs originally developed by Shinkuro, Inc.

You are free to use these maps in any presentations, websites, or other materials subject to a Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License. (Rough translation: you need to credit us and you can’t sell the maps.)

NOTE: The boundaries and names shown on this site do not imply the expression of any opinion whatsoever on the part of the Internet Society concerning the legal status of any country, territory, city or area of its authorities. Dotted and dashed lines on maps represent approximate border lines for which there may not yet be full agreement.

TO RECEIVE THESE MAPS WEEKLY VIA EMAIL when they are generated each Monday, please subscribe here: https://elists.isoc.org/mailman/listinfo/dnssec-maps

TO VIEW THE LATEST MAPS AND CSV FILES, please visit the archives for the dnssec-maps list. The list always has the most up-to-date maps. We periodically update the page below with new maps where there have been significant changes, but the list always has the most recent maps and files.

The individual maps as of 14 June 2021 are (click/tap each map for a larger image):

The maps displayed on this page are only updated periodically. If you would like to receive the maps when they are generated each week, you can subscribe to the “dnssec-maps” mailing list. The most up-to-date maps are always those that are sent to the mailing list.

Please note that additional statistics and maps about DNSSEC deployment may be found from our DNSSEC Statistics page.

Older Versions Of The Maps

Older copies of the maps are retained here for a view into the past.

September 14, 2020

June 7, 2019

March 12, 2018

August 21, 2017

June 20, 2016