Tech article
Rolling the Root Key
No preview is available. Read the original article for the full story.
Hacker News | Oct 9, 2026 | speckx
Automated excerpt
In the case of a Zone-Signing Key (ZSK), it’s the zone’s Key-Signing Key (KSK). The root key is different, as it has no parent. DNS labelResponsehttps://root-key-sentinel-is-ta-20326…NOERRORhttps://root-key-sentinel-not-ta-20326…SERVFAILhttps://root-key-sentinel-is-ta-38696… Table 2 – RFC 8509 measurement responses for KSK-2024.
Selected automatically from source text; not independently written or fact-checked. Read the original for full context.