Rolling the Root Key

2 comments

• ardline 12 hours ago
  This reminds me of a problem we hit at work. Ended up going a different direction but same root issue.
• mschuster91 20 hours ago
  > The next KSK key roll is underway as of May 2026.

  Oh, so that's likely what DENIC screwed up colossally a few days ago.

  [-]
  • malmeloo 19 hours ago
    Authoritative zones are not concerned with the DNSKEYs of their parent zones, so I doubt that's the reason. Root zone key rollovers are only really important for resolvers.