DNS root key

Cloudflare is alerting internet users and operators to the DNS root key signing key rollover scheduled for October 11, 2024. The trust anchor for the DNS root zone will be replaced, and administrators of resolvers with outdated or hardcoded trust anchors are urged to update their systems to avoid validation failures. The change is routine but can disrupt name resolution for anyone unprepared, which is drawing attention from the technical community.

APNIC has published an explanation of rolling the DNS root key, the process of replacing the cryptographic key that anchors trust for the entire domain name system. The piece walks through how the root key is managed and rotated securely, a topic of ongoing interest to network operators since previous rollover attempts faced delays and technical concerns.