Out of the blue some DNS queries stopped being resolved and named.log grew in size exponentially whinging about broken trust chains. What the? Turns out that on October 11, 2026, the DNS root changed its key-signing key (KSK) for only the second time ever. This key anchors DNSSEC’s chain of...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.
