TLDR Tech / Practical
Global Internet Security Keys to Update October 11
On October 11, 2026, the DNS root zone will undergo its second-ever Key Signing Key (KSK) rollover, transitioning from KSK-2017 to KSK-2024 to secure the DNSSEC chain of trust. Resolvers must be updated to recognize the new key prior to this date to prevent disruptions to website accessibility. Cloudflare provides details on how DNSSEC trust anchors function, automatic key updates via RFC 5011, and methods for checking readiness using RFC 8509 sentinels.
Read the full story