On October 11, 2026, the DNS root is scheduled to change its key-signing key (KSK) for only the second time ever. This key anchors DNSSEC’s chain of trust, which lets DNS resolvers authenticate answers using cryptographic signatures. The change is called a KSK rollover. Validating resolvers need to trust the new key before the switch, as otherwise healthy websites could become unreachable.
https://blog.cloudflare.com/root-ksk-2024-rollover/
novo
npub1t7…ttg0z
2026-10-07 01:05:37 UTC
Author Public Key
npub1t7eljua59ttwu3nvga7hvfw3v9kz7acxzrjjgw0w0atnmsk4vzksgttg0zSeen on
wss://relay.damus.ioPublished at
2026-10-07 01:05:37 UTCEvent JSON
{
"id": "0000045e33e5026b1683bfcd45cbf32a51367f8350e2baf4647b174629323d2b",
"pubkey": "5fb3f973b42ad6ee466c477d7625d1616c2f770610e52439ee7f573dc2d560ad",
"created_at": 1791335137,
"kind": 1,
"tags": [
[
"r",
"https://blog.cloudflare.com/root-ksk-2024-rollover/"
],
[
"client",
"Amethyst"
],
[
"nonce",
"100jSD",
"21"
]
],
"content": "On October 11, 2026, the DNS root is scheduled to change its key-signing key (KSK) for only the second time ever. This key anchors DNSSEC’s chain of trust, which lets DNS resolvers authenticate answers using cryptographic signatures. The change is called a KSK rollover. Validating resolvers need to trust the new key before the switch, as otherwise healthy websites could become unreachable.\n\nhttps://blog.cloudflare.com/root-ksk-2024-rollover/",
"sig": "769559717652f277b99805e2547cea0887c21b472ebb901bb9b79786b14ae23af609a91beb6c91ac630050b7d14ec1a4722b89fa23cd12047d444f064b6f9631"
}