We track the deployment of DNSSEC by tracking two metrics:

- M7.1: the fraction of Top Level Domain zones signed with DNSSEC. This is measured by parsing a copy of the root zone. The metric M7.1 is defined as the ratio of the number of TLD for which at least one DS record is present over the total number of TLD in the root zone.
- M7.2: the fraction of Country Code Top Level Domain zones signed with DNSSEC. Ths is also measured parsing a copy of the root zone. The metric M7.1 is defined as the ratio of the number of CC TLD for which at least one DS record is present over the total number of CC TLD in the root zone.

The following table provides the value observed for the metrics in the current month, as well as the average value over the 3 previous months, and the "historical" minimum and maximum observed since the beginning of the measurements.

Current Value | Past 3 months | Historic Low | Historic High | |
---|---|---|---|---|

M7.1: % of TLDs signed with DNSSEC | - | - | - | - |

M7.2: % of CC TLDs signed with DNSSEC | - | - | - | - |

The following graph shows the evolution of the DNSSEC metric M7.1 over time.

The following graph shows the evolution of the DNSSEC metric M7.2 over time.