This reminds me of a problem we hit at work. Ended up going a different direction but same root issue.
mschuster91 3 days ago [-]
> The next KSK key roll is underway as of May 2026.
Oh, so that's likely what DENIC screwed up colossally a few days ago.
malmeloo 3 days ago [-]
Authoritative zones are not concerned with the DNSKEYs of their parent zones, so I doubt that's the reason. Root zone key rollovers are only really important for resolvers.
Rendered at 20:32:20 GMT+0000 (Coordinated Universal Time) with Vercel.
Oh, so that's likely what DENIC screwed up colossally a few days ago.