https://blog.kalfaoglu.net/tags/infrastructure/Recent content in Infrastructure on kalfaoglu.netHugoenMon, 12 Oct 2026 00:00:00 +0000https://blog.kalfaoglu.net/posts/2026-10-12-dns-root-ksk-rollover-en/Mon, 12 Oct 2026 00:00:00 +0000https://blog.kalfaoglu.net/posts/2026-10-12-dns-root-ksk-rollover-en/<p>A website can be healthy while somebody&rsquo;s DNS resolver refuses to find it. Before moving hosting, changing nameservers, or blaming the last person who touched the firewall, check where the lookup is failing.</p> <p><a href="https://www.iana.org/news/2026/root-zone-begins-using-new-ksk-2026">IANA confirmed</a> that the DNS root zone began using its new Key Signing Key on October 11, 2026. Most users are not expected to notice disruption. DNSSEC-validating resolvers that have not learned to trust the new key, however, may encounter validation failures. This is a maintenance event with a specific technical dependency, not evidence that the Internet has collectively broken.</p>