[Pdns-users] Problem since KSK Key rollover - needed turned off dnssec=validation

[rob777]

Hi

According to
https://www.akamai.com/blog/security/october-2026-root-ksk-rollover-dns-ready
there was a DNSSEC key rollover on sunday

Despite having checked on Friday if my powerdns had the new DNSSEC Key tags
(which they had.according to the recommended tests from
https://www.akamai.com/blog/security/october-2026-root-ksk-rollover-dns-ready
everything seemed fine..) - i've runned into problems today on my two
Powerdns Resolver (5.4.x). There were different resolution problems from
interal clients an servers. After turning off the dnssec validation on the
powerdns recursor the problems disappeared.

I have to analyse it further tomorrow but and i'm confused what the issue
was: Did anyone of you run into problems with regards to this dnssec key
rollover?

Best Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20261012/dae70fb7/attachment.htm>