A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed
Cloudflare / Jul 14, 2026
- NTA restored .AL resolution but suspended DNSSEC
- 1.1.1.1 emits EDE 33 to signal Negative Trust Anchors
- EDE 9 exposes the underlying DNSKEY/DS validation failure