Market share
IPv6 and DNSSEC adoption
How many popular websites are reachable over IPv6 and sign their domain with DNSSEC?
37%
of the top 100K websites are reachable over IPv6
8.6%
sign their domain with DNSSEC
63%
have no IPv6 address at all
IPv6 — top 100K websites
All
37%of 89,977
Top 1K
37%of 816
1K – 10K
36%of 7,857
10K – 100K
37%of 81,304
IPv6 by hosting company
81%of 29,437
12%of 14,870
41%of 2,641
29%of 2,484
28%of 2,272
9.3%of 1,916
28%of 1,454
14%of 1,197
4.5%of 1,174
3.3%of 738
9.1%of 572
9.9%of 505
IPv6 by domain extension
.com
38%of 40,876
.net
38%of 4,806
.org
48%of 4,327
.ru
9.4%of 3,260
.de
32%of 2,008
.jp
15%of 1,809
.io
44%of 1,477
.br
34%of 1,445
.uk
32%of 1,259
.in
26%of 1,239
.cn
25%of 1,199
.fr
25%of 980
.it
22%of 870
.edu
23%of 833
.co
41%of 755
DNSSEC — top 100K websites
All
8.6%of 89,960
Top 1K
12%of 816
1K – 10K
11%of 7,854
10K – 100K
8.3%of 81,290
DNSSEC by domain extension
.com
7.3%of 40,876
.net
7.6%of 4,804
.org
9.5%of 4,327
.ru
1.5%of 3,257
.de
11%of 2,008
.jp
7.4%of 1,809
.io
12%of 1,477
.br
19%of 1,445
.uk
5.2%of 1,259
.in
4.3%of 1,237
.cn
2.0%of 1,198
.fr
12%of 980
.it
1.4%of 870
.edu
11%of 833
.co
7.0%of 755
How this is measured
IPv6: the domain, or its www name, resolves to at least one IPv6 (AAAA) address. A site behind a CDN counts as reachable over IPv6 when the CDN serves it that way, which is what a visitor gets. DNSSEC: the parent zone (for example .com) publishes a DS record for the domain, i.e. the domain is signed. We record the presence of the DS record, not the validity of the signatures, so a misconfigured signature still counts as signed.
Base: every domain of the Tranco top 100K that resolves. DNS records are refreshed weekly and DNSSEC is rescanned weekly. Shares are rounded to the nearest whole percent.