M7: DNSSEC Deployment

We track the deployment of DNSSEC by tracking four metrics:

M7.1: the fraction of Top Level Domain zones signed with DNSSEC. This is
measured by parsing a
copy of the root zone. The metric M7.1 is defined as the ratio of the number of
TLD for which at least one DS record is present over the total number of TLD
in the root zone.

M7.2: the fraction of Country Code Top Level Domain zones signed with DNSSEC.
Ths is also measured parsing a
copy of the root zone. The metric M7.1 is defined as the ratio of the number of
CC TLD for which at least one DS record is present over the total number of CC TLD
in the root zone.

M7.3: the fraction of Top Level Domain zone using a specified algorithm with DNSSEC,
as derived from the DS records for TLD in the root zone.

M7.4: the fraction of Country Top Level Domain zone using a specified algorithm with DNSSEC,
as derived from the DS records for CC TLD in the root zone.
The following table provides the value observed for the
metrics in the current month, as well as the average value over the 3 previous months,
and the "historical" minimum and maximum observed since the beginning of the measurements.
M7.1: % of TLDs signed with DNSSEC
The following graph shows the evolution of the DNSSEC metric M7.1
(?) over time.
M7.2: % of CC TLDs signed with DNSSEC
The following graph shows the evolution of the DNSSEC metric M7.2
(?) over time.
M7.3: % of TLD using specific algorithms

M7.4: % of CC TLD using specific algorithms
