The following maps provide a view into global DNSSEC deployment and break the deployment status of top-level domains (TLDs) out into the following five categories:

• Experimental – Internal experimentation announced or observed
• Announced – Public commitment to deploy
• Partial – Zone is signed but not in operation (no DS in root)
• DS in Root – Zone is signed and its DS has been published
• Operational – Accepting signed delegations and DS in root

These maps are a bit different from other DNSSEC statistics sites in that they contain both factual, observed information (for the “DS in Root” and “Operational” states) and also information based on news reports, presentations and other collected data (the first three states).  For more information about how we track the deployment status of TLDs, please read our page on the 5 Stages of DNSSEC Deployment.

The maps and associated data files track both the DNSSEC status of country-code TLDs (ccTLDs), shown in the maps, and also generic TLDs (gTLDs), shown in the comma-separated value (CSV) files.

These maps are produced by the Internet Society Deploy360 Programme based on a database and programs originally developed by Shinkuro, Inc.

You are free to use these maps in any presentations, websites or other materials subject to a Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License. (Rough translation: you need to credit us and you can’t sell the maps.)

 

The individual maps as of 19-Jun-2015 are (click/tap each map for a larger image):

 

Additionally, on June 19, 2015, a high-resolution PDF of ccTLD DNSSEC deployment was generated for a presentation. This is not part of the weekly deployment map email but is occasionally generated on demand (click/tap on the image to see the full version):

Feedback about these maps are welcome, either as a comment to this page or via email or our web form.

The maps displayed on this page will be updated periodically as new information becomes available.  If you would like to receive the maps whenever new versions are generated each week, you can now subscribe to the “dnssec-maps” mailing list.  The most up-to-date maps are always those that are sent to the mailing list.

Please note that additional statistics and maps about DNSSEC deployment may be found from our DNSSEC Statistics page.

---

Older Versions Of The Maps

Occasional older copies of the maps are retained here for a view into the past.

December 15, 2014

• Global view
• Africa
• Asia Pacific
• Europe
• Latin America
• North America

December 1, 2014

• Global view
• Africa
• Asia-Pacific
• Europe
• Latin America
• North America

October 14, 2014

• Global view
• High resolution PDF of global view
• Africa
• Asia-Pacific
• Europe
• Latin America
• North America

April 28, 2014

• Global view
• Africa
• Asia-Pacific
• Europe
• Latin America
• North America

March 21, 2014

• Global view  – also available as a high-resolution PDF
• Africa
• Asia-Pacific
• Europe
• Latin America
• North America

January 23, 2014

• Global view
• Africa
• Asia-Pacific
• Europe
• Latin America
• North America

September 9, 2013

• Global view
• Africa
• Asia Pacific
• Europe
• Latin American
• North America

April 3, 2013

• Global view – also available as a high-resolution PDF
• Africa
• Asia Pacific
• Europe
• Latin America
• North America

An animated map from April 3, 2013, is available to show the progression of DNSSEC deployment over time. Note that the “future” deployment is based upon information Shinkuro had received about plans by various ccTLDs to deploy DNSSEC but as those plans may change the future information should be viewed as a forecast rather than a definitive statement. (And note that the maps above have already changed this view.)

Click/tap on the image below to see a larger image with the animation: