SecurityCloudflare Blogabout 1 hour ago
DNS Root Key Changes October 11
9 min read
On October 11, 2026, the DNS root changes its key-signing key from KSK-2017 to KSK-2024. Validating resolvers must trust the new key before the switch to prevent websites from becoming unreachable. Cloudflare offers a readiness test using RFC 8509 to check if a resolver trusts the new root key identified by tag 38696.
Level
Hype check
Tap to vote and see what everyone thinks.