The new security extensions for DNS were enabled on the .com domain, but not one of the world’s 100 most popular sites has yet made the upgrade.