.de DNSSEC issue root cause

Shreyas Zare shreyas at technitium.com
Fri May 8 07:09:28 UTC 2026


Hi,

DENIC has published blog post [1] explaining cause of the recent .de 
DNSSEC issue. But the root cause for it is still unclear. Key rollover 
is an automated process and thus its not clear how it can result in 
publishing malformed signatures. That too this was a ZSK rollover.

It would be great if anyone has more technical insights into this to 
help understand it better.

[1] https://blog.denic.de/en/technical-issue-with-de-domains-resolved/

Regards,
*Shreyas Zare*
Technitium <https://technitium.com/>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20260508/fa5687ec/attachment.html>


More information about the dns-operations mailing list