🔐 DNSSEC Algorithms

Which signing algorithms .dk zones use, per DNS provider, and zones still on algorithms that must no longer be used · all insights

DNSSEC signatures use one of a handful of algorithms. Modern zones use ECDSA P-256 (13) or Ed25519 (15); RSA-SHA1 variants are deprecated by RFC 8624. This page shows the mix across .dk, per DNS provider, and lists zones still on must-not algorithms. Data comes from our own scanners, which re-resolve every .dk domain in the zone roughly once a week.

Based on 55,778 domains probed so far (4.1% of the zone). Our scanners refresh these probes at least every 30 days, so the numbers fill in and settle over the first month.

🔐 Signing algorithms

33,181 signed zones
#AlgorithmStatusZonesShare
13ECDSAP256SHA256RFC 8624: must31,813
95.9%
8RSASHA256RFC 8624: must860
2.6%
15ED25519RFC 8624: recommended478
1.4%
14ECDSAP384SHA384RFC 8624: may18
0.1%
7RSASHA1-NSEC3-SHA1RFC 8624: must not9
0.0%
5RSASHA1RFC 8624: must not2
0.0%
10RSASHA512RFC 8624: not recommended1
0.0%

🏢 By DNS provider

Provider (NS domain)Signed zonesAlgorithm mix
one.com10,565ECDSAP256SHA256 100% · RSASHA256 0% · RSASHA1-NSEC3-SHA1 0%
simply.com10,555ECDSAP256SHA256 100%
dandomain.dk3,986ECDSAP256SHA256 100%
curanet.dk1,843ECDSAP256SHA256 100%
scannet2.dk856ECDSAP256SHA256 100%
webhosting.dk756ECDSAP256SHA256 100%
cloudflare.com564ECDSAP256SHA256 100%
hyp.net494ED25519 96% · ECDSAP256SHA256 4% · RSASHA256 0%
wannafind.dk294ECDSAP256SHA256 100%
dnsserver.dk240ECDSAP256SHA256 100%
sitnet.dk238ECDSAP256SHA256 100%
netsite.dk232ECDSAP256SHA256 100%
dns.services227ECDSAP256SHA256 100%
eurodns.com222ECDSAP256SHA256 91% · RSASHA256 9%
dns-123.net219ECDSAP256SHA256 100%
nordicway.dk188RSASHA256 99% · ECDSAP256SHA256 1%
e-studio.dk147RSASHA256 99% · ECDSAP384SHA384 1%
dotserv.com127ECDSAP256SHA256 100%
loopia.se122RSASHA256 100%
123hotel.dk61ECDSAP256SHA256 100%
azure-dns.com58ECDSAP256SHA256 100%
netgiganten.dk55RSASHA256 100%
aveo.dk51ECDSAP256SHA256 100%
au.dk50RSASHA256 100%
ideal.shop45ECDSAP256SHA256 100%

⚠️ Zones signed with a must-not algorithm

11 shown
DomainAlgorithm
0002.dkRSASHA1-NSEC3-SHA1
aabenraagospelfaellesskab.dkRSASHA1-NSEC3-SHA1
fællesavisen.dkRSASHA1-NSEC3-SHA1
gymnathlon.dkRSASHA1-NSEC3-SHA1
hb-revision.dkRSASHA1-NSEC3-SHA1
hldisplay.dkRSASHA1
jolyn.dkRSASHA1-NSEC3-SHA1
pmf-pension.dkRSASHA1-NSEC3-SHA1
pr-trading.dkRSASHA1
vestjyske-revision.dkRSASHA1-NSEC3-SHA1
vetivo.dkRSASHA1-NSEC3-SHA1
dhd.dk [/] search Domains, Hosts & DNS — .dk zone