Some glitches here and there, notably bundled unbound version in opendkim for example.
But the warning made lots of people react I think, so everyone updated their anchors I guess

Thanks Oli for the heads up btw

Le 2026-10-13T14:49:20.000+02:00, Eliot Lear via swinog <swinog@lists.swinog.ch> a écrit :

Did anyone have any problems?  Seems like it was a big nothing (quite nice).

Eliot


On 09.10.2026 09:29, Oli Schacher via swinog wrote:
Hi everyone,

Just a reminder that the next DNSSEC root Key Signing Key (KSK) rollover is coming up on 11 October 2026.

For those operating DNSSEC-validating resolvers, it might be worth double-checking that your resolvers have picked up the new KSK-2024 trust anchor (key tag 38696) through standard software updates or RFC5011.

There's a handy test provided by Cloudflare to check whether your resolvers are ready:
https://dnstest.dev/ksk-2024/


Cheers,
Oli

_______________________________________________
swinog mailing list -- swinog@lists.swinog.ch
To unsubscribe send an email to swinog-leave@lists.swinog.ch
_______________________________________________
swinog mailing list -- swinog@lists.swinog.ch
To unsubscribe send an email to swinog-leave@lists.swinog.ch