Rolling the Root Key (opens in new tab)

(blog.apnic.net)

31 pointsjandeboevrie5d ago2 comments

2 comments

> The next KSK key roll is underway as of May 2026.

Oh, so that's likely what DENIC screwed up colossally a few days ago.

Authoritative zones are not concerned with the DNSKEYs of their parent zones, so I doubt that's the reason. Root zone key rollovers are only really important for resolvers.

j / k navigate · click thread line to collapse

2 comments

mschuster912d ago

> The next KSK key roll is underway as of May 2026.

Oh, so that's likely what DENIC screwed up colossally a few days ago.

malmeloo2d ago

Authoritative zones are not concerned with the DNSKEYs of their parent zones, so I doubt that's the reason. Root zone key rollovers are only really important for resolvers.

j / k navigate · click thread line to collapse