Accelerating the search for antimicrobial peptides with Google Antigravity
deepmind.google·2h ago
AI Engineering
Lobsters·6d ago·5 min read
Rolling the Root Key (Update)
TL;DR
The upcoming roll of the DNS Root Key on October 11, 2026, is critical for DNSSEC validation, with 70% of resolvers reportedly adopting the new key. However, several ISPs still show low acceptance rates, potentially impacting users' DNS security.
✦ Why It Matters
Check if your ISP is on the low acceptance list and encourage them to update their DNS settings.
Key Takeaways
- Verify if your DNS resolver trusts KSK-2024.
- Encourage ISPs with low acceptance rates to update their DNS settings.
- Use Cloudflare's test script to check your DNS configuration.
- Monitor the adoption rates of KSK-2024 in your network.
How It Works
The KSK roll process involves the old KSK signing the new KSK, allowing DNS resolvers to authenticate the new key. Resolvers must observe the new key for a minimum hold-down period of 30 days before accepting it as trusted.
Techniques like RFC 8145 allow resolvers to signal their trusted keys back to the querier, providing insight into the adoption of the new KSK.