TLDR Tech / DevOps
A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed
Albania's top-level domain (.AL) suffered a DNSSEC validation failure on July 3 after a botched key rollover made the entire TLD unreachable for users with validating DNS resolvers for several hours. In response, Cloudflare's 1.1.1.1 installed a Negative Trust Anchor to restore access and became the first major resolver to implement a new Extended DNS Error code (EDE 33) that explicitly tells users when DNSSEC validation has been temporarily bypassed.
Read the full story