DNSSEC

The root zone key signing key that underpins DNSSEC trust for the internet's domain name system is being rolled over on October 11. Resolvers and network operators that fail to update their trust anchors could see DNS validation failures once the new key takes effect. Cloudflare has published guidance explaining the rollover and how operators can prepare.

The Internet's root cryptographic trust keys are scheduled to change on October 11. The change is expected to affect how network operators and service providers handle DNSSEC trust anchors, and technical communities are urging administrators to check their systems are prepared before the date to avoid outages or resolution failures.