TLDR Tech / Practical
DNS Root Key Update on Sunday May Cause Resolution Issues
The DNS root zone will update its cryptographic key on Sunday, October 11, 2026, switching to KSK-2024 and retiring KSK-2017. Resolvers not updated to trust the new key, which currently is trusted by over 95 percent of reporting resolvers, will cease to resolve any domain names. Administrators need to confirm their trust anchors are current before their existing root key caches expire, using tools provided by vendors or RFC 8509 sentinel tests.
Read the full story