[swinog] Re: DNSSEC Root KSK Rollover this weekend

Did anyone have any problems?  Seems like it was a big nothing (quite nice).

Eliot

On 09.10.2026 09:29, Oli Schacher via swinog wrote:

Hi everyone,

Just a reminder that the next DNSSEC root Key Signing Key (KSK) rollover is coming up on 11 October 2026.

For those operating DNSSEC-validating resolvers, it might be worth double-checking that your resolvers have picked up the new KSK-2024 trust anchor (key tag 38696) through standard software updates or RFC5011.

There's a handy test provided by Cloudflare to check whether your resolvers are ready: https://dnstest.dev/ksk-2024/

Cheers, Oli

---

swinog mailing list -- swinog@lists.swinog.ch To unsubscribe send an email to swinog-leave@lists.swinog.ch