A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassedCloudflare / Jul 14, 2026.ALのDNSSECロールオーバー失敗.1.1.1.1がEDE33でNTAを通知NTA適用中はDNSSEC保護が一時消失dnssecntaederesolverdnsdnsop
When DNSSEC goes wrong: how we responded to the .de TLD outageCloudflare / May 6, 2026DNSSEC署名誤配布serve-staleで部分救済NTA相当の回避を実施dnssecntaservfailserve-staleedekey-rotation