We track the deployment of DNSSEC by tracking two metrics:

- M7.1: the fraction of Top Level Domain zones signed with DNSSEC. This is measured by parsing a copy of the root zone. The metric M7.1 is defined as the ratio of the number of TLD for which at least one DS record is present over the total number of TLD in the root zone.
- M7.2: the fraction of Country Code Top Level Domain zones signed with DNSSEC. Ths is also measured parsing a copy of the root zone. The metric M7.1 is defined as the ratio of the number of CC TLD for which at least one DS record is present over the total number of CC TLD in the root zone.

In the following table, the *current value* is the
value of the metric for the current month.
The *average value* is the average value of that metric
over the 12 months preceeding this one -- or the average since the beginning
of measurements if measurements started fewer than 12 months ago.

Current value | Average value | |
---|---|---|

M7.1: % of TLDs signed with DNSSEC | - | - |

M7.2: % of CC TLDs signed with DNSSEC | - | - |

The following graph shows the evolution of the DNSSEC metric M7.1 over time.

The following graph shows the evolution of the DNSSEC metric M7.2 over time.