Pakistan’s .pk domain has gained DNSSEC protection, but an October 11 scan found just one fully validating domain among 158,561 examined. Another 1,230 signed domains lack the parent-zone records needed to establish trust.