You may have heard that DNSSEC, the security extensions to the DNS – the
Domain Name System – is in full swing, but you may not have heard that its
deployment is not going extremely quickly. I wanted to find which number of
Top-Level-Domains (TLDs) are what I like to call DNSSEC ready. ICANN
publishes their TLD DNSSEC Report in HTML, but I wanted a graphic
representation. (Oops: I see while writing this, that they have now have a
diagram in their report as well.) So, here is the data. A TLD is DNSSEC-
ready if its zone is signed and if its key is either published as a DS
record in the root, or it has an ITAR anchor, or it has a DLV
record. Keep an eye on the data; it is updated daily.