Common Beliefs About DNSSEC Put to the Test: An Invitation to Fact-Check Your Assumptions

I'm sharing because I think this is a good modern reference for DNSSEC capabilities. Although I think this misses two things.

Email also supports MTA-STS to secure messages in transit. Support for MTA-STS is now double that of DANE among top domain names. This uses HTTPS, not DNSSEC, for its security properties.

While DNSSEC is unpopular on a global basis, it is popular in certain regions. The ccTLD for Denmark is around 47%, by some measures.

My company publishes data that tracks these nuisance: https://buttondown.com/foxloopsoftware/archive/email-ecosystem-dashboard/