Dan York

Curious to see where DNSSEC is available around the world? We’ve just published the latest DNSSEC deployment maps showing which “country code top-level domains” (ccTLDs) have signed their domains with DNSSEC and the status of many others. We have a global map and also regional maps for Africa, Asia Pacific, Latin America, North America and  Europe.

All of these maps can be found on:

http://www.internetsociety.org/deploy360/dnssec/maps/

As we note on that page, these maps are a bit different from many other DNSSEC statistics sites in that they offer not just information based on observable data but also information based on news reports, industry presentations, interactions with DNS operators and other sources.   The maps are free for anyone to use subject to a Creative Commons license.

The main point of these maps is that the show the signed top-level domains (TLDs). Having a signed TLD is the first step in being able to sign your own domain and give it the additional layer of security possible through DNSSEC.  Once a TLD is signed, you then need to have a registrar that supports passing DNSSEC records and you need a DNS hosting operator (or need to host the zone yourself) who can sign your DNS records with DNSSEC.  But it all starts with having a signed TLD, which is why this is so critical.

Obviously on maps like these we can only show the “country code TLDs (ccTLDs)” as the other “generic TLDs” such as .COM, .ORG, don’t have any location we can easily put on a map.  This includes all the many “new generic TLDs” (newgTLDs) that are appearing each week.  We don’t quite know how to visualize those yet… so for the moment the maps are just for ccTLDs.

I’d like to note that the great team working with Steve Crocker at Shinkuro created the programs and operated the database for these maps until the project was recently transitioned to our team here at the Internet Society Deploy360 Programme as part of our work with Shinkuro and Parsons Technology (announced last July) to accelerate the deployment of DNSSEC.  We’re grateful for the assistance of the team at Shinkuro in helping with the transition and we’re looking forward to providing you these maps on a regular basis.

We’d love to hear your feedback on these maps.  Do you find them useful?  Are they helpful to you?  Did you see any errors?  Please do let us know, either by a comment here to this blog post, through our feedback form or email, or by posting to one of the social networks where this post appears.