The DNS resilience programme aims to promote the use of DNSSEC and other DNS-based security standards for .ch and .li domain names, in collaboration with registrars.
DNSSEC is a proven security standard on the internet. It prevents an internet connection from being redirected to a wrong website or internet service via forged DNS responses. More about DNSSEC
However, the implementation of DNSSEC for .ch domain names was slow to gain momentum. Switch therefore introduced the DNS resilience programme on behalf of OFCOM in 2022. With the approval of the Liechtenstein Office of Communications, Switch has extended this programme to.li domain names.
Financial incentives encourage our accredited registrars to secure as many of their .ch and .li domain names as possible with DNSSEC and to implement further proven security standards recommended by security experts. The standards promoted in addition to DNSSEC are DMARC/SPF, DANE for SMTP and IPv6. The DNS resilience programme thus protects .ch and .li domain names from cyber risks and makes the internet in Switzerland and Liechtenstein safer and more resilient.
The results speak for themselves. The proportion of .ch domain names signed with DNSSEC has increased from 6 percent in 2020 to 52 percent at the end of 2025. These charts show the development in the number of DNSSEC-signed .li domain names.