The DNS Root Key Has Changed: Check the Resolver Before Moving Your Website
A website can be healthy while somebody’s DNS resolver refuses to find it. Before moving hosting, changing nameservers, or blaming the last person who touched the firewall, check where the lookup is failing. IANA confirmed that the DNS root zone began using its new Key Signing Key on October 11, 2026. Most users are not expected to notice disruption. DNSSEC-validating resolvers that have not learned to trust the new key, however, may encounter validation failures. This is a maintenance event with a specific technical dependency, not evidence that the Internet has collectively broken. ...