9 Oct
2026
9 Oct
'26
9:29 a.m.
Hi everyone,
Just a reminder that the next DNSSEC root Key Signing Key (KSK) rollover is coming up on 11 October 2026.
For those operating DNSSEC-validating resolvers, it might be worth double-checking that your resolvers have picked up the new KSK-2024 trust anchor (key tag 38696) through standard software updates or RFC5011.
There's a handy test provided by Cloudflare to check whether your resolvers are ready: https://dnstest.dev/ksk-2024/
Cheers, Oli