ICANN Announces Significant Changes to Internet Security Measures Coming in 2026

ICANN's Major Update on Internet Security

On May 20, 2026, the Internet Corporation for Assigned Names and Numbers (ICANN) declared a substantial initiative concerning Internet security—specifically, it will transition the trust anchor for the Domain Name System (DNS) on October 11, 2026. This forthcoming alteration is regarded as a crucial advancement to ensure the enduring safety, stability, and adaptability of the DNS framework.

The trust anchor, technically known as the Key Signing Key (KSK) for DNS Security Extensions (DNSSEC), is a cryptographic key vital for establishing a secure framework for DNS responses. This key verifies the authenticity of the DNS replies, ensuring they remain intact during transit. Simply put, DNSSEC plays a significant role in guaranteeing users receive legitimate data from the DNS, protecting them when accessing various websites and online services. The impending transition will involve replacing the current KSK with a new one, reinforcing the system's cryptographic security globally.

Kim Davies, Vice President of IANA Services and President of the Public Technical Identifiers (PTI), stated, "The trust anchor transition is a meticulously coordinated process that safeguards the integrity of the DNS." While it is expected that most Internet users will not experience any noticeable changes, DNS software operators must ensure proper configuration of their systems to trust the new key ahead of its implementation.

As part of its responsibilities with IANA, ICANN oversees the DNS root zone and collaborates with partners throughout the global Internet community for this transition. In an effort to mitigate potential disruptions, ICANN will announce the new KSK well in advance, allowing affected operators sufficient time to update their systems and verify the proper functionality of the automated systems responsible for updating the trust anchor.

The transition is set to unfold according to a phased implementation plan, which commenced in 2024 and is projected to wrap up by 2027. During this transition period, both the current KSK and the new key will remain valid, providing ample time for recursive resolvers—systems managed by Internet Service Providers (ISPs) and other organizations that consult and verify DNS information on behalf of users—to adopt the new trust anchor before the new KSK begins signing the root zone in October 2026 and the old key is phased out by January 2027.

Operators utilizing validation recursive resolvers, especially those with manually configured trust anchors or outdated software, are encouraged to review their systems and ensure they are ready for the transition. Inadequate updates could result in DNS resolution failures post-transition date.

For further information regarding the KSK transition, including operational guidelines and technical resources, stakeholders can visit ICANN's dedicated KSK transition information page.

About ICANN

ICANN's mission is to promote a global, unified, stable, and secure Internet. To communicate with others online, we must input a unique address—either a name or a number—into our computers or devices. This innovative organization aids in coordinating and supporting these unique identifiers worldwide. Established in 1998 as a nonprofit public corporation, ICANN encompasses a community comprising participants from across the globe, all dedicated to maintaining the integrity and security of the Internet.