DNS root key rollover: check your resolver before October 11
The DNS root’s signing key is scheduled to change on October 11, 2026, and a resolver that has not trusted the replacement could make otherwise healthy websites unreachable. The new key, KSK-2024 (key tag 38696), has been published since January 2025; now operators can test whether their resolver recognizes it. Most website operators do not need to act, but DNSSEC resolver operators should verify readiness.
Source
👉@sysadminoff
https://4sysops.com/archives/dns-root-key-rollover-check-your-resolver-before-october-11/
Post #20705
21
