When DNSSEC goes wrong: how we responded to the .de TLD outage
Cloudflare / May 6, 2026
- .de published invalid DNSSEC signatures causing widespread SERVFAILs
- Cloudflare marked .de as insecure (NTA-equivalent) at 22:17 UTC to restore reachability
- Serve-stale mitigated impact; EDE propagation bug initially obscured the DNSSEC cause