#DNSSEC
LightNews LightNews
marque.at
We are seeing reports of DNSSEC errors across multiple domains, rest assured our team is working on this and we are working on restoring the affected domains.
November 2, 2026 at 4:04 AM
okami.mom
you can have arbitrary writes if urs has dnssec
October 28, 2026 at 5:57 AM
dogpawhat.tech
Knock yourself out www.iana.org/dnssec/cerem...
Root KSK Ceremonies
www.iana.org
October 30, 2026 at 9:49 PM
dnsrootzonediff.bsky.social
2026110101 -> 2026110102 changes
DNSSEC 1
re-signing: 5494 RRSIG (omitted)

[DNSSEC]
+ bz. DS 53666 8 2 68B554AEEBDE38DE65DC0E61F8D12E...
November 2, 2026 at 1:29 AM
sysseder.bsky.social
DNSSEC authenticates DNS data. It does not encrypt queries or prove a website is safe. See the limits:
www.sysseder.com/2026/10/dns-...
DNS and DNSSEC: what a validated answer protects, and what it does not
Understand DNSSEC signatures, trust chains and validation results, without confusing authenticated DNS with encryption or a security guarantee.
www.sysseder.com
November 2, 2026 at 7:45 AM
dnsrootzonediff.bsky.social
2026102701 -> 2026102702 changes (10/30)
[DNSSEC]
+ dance. DS 34262 8 2 4FE12E0075F7448D2FBAB751E1EB2E...
+ dating. DS 5260 8 2 37BD8CB4E4D5CFC7AE40DBDB1B3CF20...
+ deals. DS 58487 8 2 68BE881C158B95BA19034499432E0A...
+ degree. DS 21116 8 2 234F961338CE8F5AF86A18E5CEC057...
October 27, 2026 at 9:32 PM
alib234.moe
me hearing about collabvm
trying to go to site to check it out cause sounds like a bad idea
site doesn't load
site has bogus dnssec
October 29, 2026 at 7:51 PM
vincent.bernat.ch
I am moving things around with DNS providers and DNSSEC is a pain to manage. I am currently stuck at a registry not updating its DS record... Looking around, I see DNSSEC is still controversial: ispcol.potaroo.net/2024-05/dnss... (also sockpuppet.org/blog/2015/01..., some aspects are outdated).
ISP Column - May 2024
ispcol.potaroo.net
October 30, 2026 at 6:51 AM
dnsrootzonediff.bsky.social
2026103000 -> 2026103001 changes (1/2)
DNSSEC 4
re-signing: 5494 RRSIG (omitted)

[DNSSEC]
+ ai. DS 1814 8 2 8D4293E0E8AE7D9BE73DEF27D95203E...
+ emerck. DS 5957 8 2 D52F0E9CCE04B6A4F14E82E32486A4C...
+ ist. DS 47420 8 2 826B700FDED235B050BFEF6A72E899...
October 30, 2026 at 7:29 PM
dnsrootzonediff.bsky.social
2026103000 -> 2026103001 changes (2/2)
[DNSSEC]
+ istanbul. DS 2354 8 2 2291DC6EF6ED1F0F8FBF62E1B7FEF24...
October 30, 2026 at 7:29 PM
dnsrootzonediff.bsky.social
2026102901 -> 2026102902 changes (1/2)
DNSSEC 6
re-signing: 5494 RRSIG (omitted)

[DNSSEC]
- cern. DS 20371 8 2 5A48EAB25C4CF4978949D677C18287...
+ delta. DS 51649 8 2 EB8361415D577E2D983B8DCF311850...
+ imamat. DS 6122 8 2 274B3BBCA68C17D6529AB94D03733D6...
October 29, 2026 at 11:29 PM
vincent.bernat.ch
It seems DNSSEC adoption is around 10% of requests (according to Cloudflare 1.1.1.1): radar.cloudflare.com/dns?dateRang...
DNS queries to 1.1.1.1 Worldwide | Cloudflare Radar
Trends and insights based on global DNS queries to 1.1.1.1.
radar.cloudflare.com
October 30, 2026 at 7:08 AM
dnsrootzonediff.bsky.social
2026102900 -> 2026102901 changes (1/2)
DNSSEC 5
re-signing: 5494 RRSIG (omitted)

[DNSSEC]
+ java. DS 45212 8 2 95C9A83A6FFD43A77880B2BA2AADB7...
- java. DS 45615 8 2 7F20B5E00C2324D253F209B3F386F7...
+ lamer. DS 37040 8 2 3A7BFA3789405AA98037B7E65019D0...
October 29, 2026 at 6:29 PM
qncnews.bsky.social
NITDA Adds DNSSEC to Cybersecurity Checks for Government MDAs

NITDA will now assess all MDAs on DNSSEC as part of its cybersecurity checks and wants every .gov.ng website signed to block tampering with domain records.
NITDA Adds DNSSEC to Cybersecurity Checks for Government MDAs
NITDA will now assess all MDAs on DNSSEC as part of its cybersecurity checks and wants every .gov.ng website signed to block tampering with domain records.
qncnews.com
October 29, 2026 at 5:49 AM
dnsrootzonediff.bsky.social
2026102803 -> 2026102804 changes (8/18)
[DNSSEC]
+ lefrak. DS 14821 8 2 041DBF3EDF1359AB07A3F3B2169DE0...
+ legal. DS 6194 8 2 4EC5AF71B36D2D108DA17F393EE3835...
+ lego. DS 43931 8 2 A66717B96E9CEA66AF360DA6FC6262...
+ lgbt. DS 11032 8 2 ADBF29341BC4D2C1815A123F996AE7...
October 28, 2026 at 9:34 PM
dnsrootzonediff.bsky.social
2026102900 -> 2026102901 changes (2/2)
[DNSSEC]
+ mckinsey. DS 13015 8 2 70E781EA9F2DD6FE5AEFCB7C019C9C...
+ mit. DS 7424 8 2 29AFECA6FFFD16FF3D3BFEF8C714E9A...
October 29, 2026 at 6:29 PM
dnsrootzonediff.bsky.social
2026102801 -> 2026102802 changes (1/4)
DNSSEC 14
re-signing: 5498 RRSIG (omitted)

[DNSSEC]
+ immo. DS 1151 8 2 4F56C9F5C7D2DA59424A419C96D6FAB...
+ immobilien. DS 29612 8 2 0DE1509B382D5037CC7F1C2E74AD40...
+ industries. DS 47486 8 2 C9390F47C34FD9D625ADDD8B537C9D...
October 28, 2026 at 5:32 PM
bloodsugarmagic.bsky.social
@nospamproxy.de ist auch 2026 in der Hall of Fame der E-Mail-Sicherheit von @bsi.bund.de, @bitkom.org und @eco.de . Im Fokus dieses Jahr: die konkrete Umsetzung von DNSSEC für eine vertrauenswürdigere E-Mail-Infrastruktur.
www.bloodsugarmagic.com/de/newsrooms...
#DNSSEC #EMailSecurity
NoSpamProxy erneut in der Hall of Fame der E-Mail-Sicherheit – bloodsugarmagic
Deutschlands vermutlich beste PR-Agentur und Beratung für Positionierung von IT-Unternehmen wie ISVs, Services Provider, Provider, Consulting
www.bloodsugarmagic.com
October 27, 2026 at 10:43 AM
dnsrootzonediff.bsky.social
2026102901 -> 2026102902 changes (2/2)
[DNSSEC]
+ ismaili. DS 40204 8 2 E9A42935DFCBCEB6E1DD6078920C21...
+ kosher. DS 14125 8 2 C57048D9D372610C231DFA8E0EAEA7...
+ mu. DS 46579 8 2 2364D142F9C4BCD265E3659921288B...
October 29, 2026 at 11:29 PM
dnsrootzonediff.bsky.social
2026102701 -> 2026102702 changes (1/30)
DNSSEC 116
re-signing: 5498 RRSIG (omitted)

[DNSSEC]
- abb. DS 16216 8 2 6DC3161E488F546A3BAA11018BF012...
- abbott. DS 41764 8 2 04C4003CF06316C866DF2DCF23304B...
- abc. DS 43549 8 2 7A1D01C238B756BAA6E99C5ADD35FB...
October 27, 2026 at 9:32 PM
dnsrootzonediff.bsky.social
2026102701 -> 2026102702 changes (30/30)
[DNSSEC]
+ mn. DS 65249 8 2 F0CD5CA84D86B800821B7FE8569842...
October 27, 2026 at 9:33 PM
generatorlabs.com
Anyone had a DNSSEC outage because the signing job quietly stopped? The signatures don't expire until days or weeks later, so it breaks long after whatever caused it. What tipped you off? generatorlabs.com/blog/dnssec-...
October 27, 2026 at 7:36 PM
stellated.mastodon.sdf.org.ap.brid.gy
Imagine showing up to an IANA DNSSEC KSK ceremony totally sloshed and throwing up all over the HSM.
October 28, 2026 at 7:02 AM
dnsrootzonediff.bsky.social
2026102601 -> 2026102602 changes
DNSSEC 2
re-signing: 5498 RRSIG (omitted)

[DNSSEC]
+ bm. DS 5636 8 2 73A6E76BCFD168C3F7161C273A41041...
+ es. DS 4901 8 2 FCD06BEE2AD5953E0DC9209735771D8...
October 26, 2026 at 11:32 PM
infranest.io
Moving a domain to another registrar? It moves the registration, not your DNS. The traps: the 60-day lock, an approval email nobody reads, and DNSSEC.

Our step-by-step: infranest.io/blog/transfe...
October 27, 2026 at 2:02 PM