A data-driven analysis of DNSSEC self-deployment among ICANN-accredited registrars

This paper presents a data-driven analysis of DNSSEC self-deployment among ICANN-accredited registrars. Using a cross-sectional snapshot of all active accreditations as of June 2025, the study combines the ICANN Registrar Accreditation List with automated DNS measurements and .com registry data. We aggregate 3,018 accreditations into 698 registrar domains and classify each primary domain by DNSSEC status. Only 9.46 percent of registrar domains have DNSSEC enabled; self-deployment is uncommon. We measure registrar size by the number of .com domains under management. In the unadjusted analysis, larger registrars deploy DNSSEC more often. After adjustment for geographic region, this association weakens and is no longer significant. Regional differences are significant, persist after adjustment for size, and show higher adoption in Europe than in Asia and North America. The results show which security-related configurations key intermediaries exhibit on their own domains.