The company’s post frames this as a planned DNSSEC root-key rollover and points to RFC 8509 trust anchor sentinels as a way to test whether a DNS resolver is ready. The announcement establishes a date and a readiness-check mechanism; it does not establish that a resolver failure or service outage has occurred.
Raw SignalOct 6, 20261 min read1 source
On October 11, 2026, the DNS root switches to a new key-signing key (KSK-2024).
In one minute
Cloudflare says the DNS root will switch to a new key-signing key, KSK-2024, on October 11, 2026.