#USA #Los Angeles #ICANN #KSK #DNSSEC

ICANN's Significant Security Update in 2026

On October 11, 2026, the Internet Corporation for Assigned Names and Numbers (ICANN) is set to implement a critical update aimed at enhancing the security, stability, and resilience of the Domain Name System (DNS). This update, known as the trust anchor rollover, is a significant step in ensuring that internet users continue to receive accurate and unaltered DNS data when accessing websites and online services.

The trust anchor, formally referred to as the Key Signing Key (KSK) of the Domain Name System Security Extensions (DNSSEC), serves a crucial role in the verification of DNS responses. This cryptographic key is foundational to the trust anchor of the DNSSEC, helping ensure that the information users receive is legitimate and has not been tampered with during its transit.

According to ICANN, the process of rolling the trust anchor involves replacing the existing KSK with a new key, thereby reinforcing the cryptographic security framework that underpins the global DNS. Kim Davies, Vice President of IANA Services and President of Public Technical Identifiers (PTI), stated, "The trust anchor rollover is a meticulously coordinated process that serves to uphold the integrity of the DNS. While most internet users will not notice any immediate changes, DNS software operators must ensure their systems are correctly configured to trust the new key before the rollover takes place."

To facilitate this transition, ICANN is working collaboratively with partners from across the global internet community. They will publish the new KSK well in advance of the scheduled rollover, allowing operators enough time to incorporate the necessary updates. This advance notice is aimed at minimizing potential service interruptions. The rollout is organized according to a phased implementation schedule that commenced in 2024 and will continue through 2027. Throughout this period, both the existing and new KSKs will remain valid, giving recursive resolvers—the systems used by Internet Service Providers (ISPs), corporations, and other entities time to transition to the new trust anchor before the old KSK is retired in January 2027.

Operators managing recursive resolvers, especially those with manually configured trust anchors or utilizing outdated software, are urged to verify their systems and confirm they are prepared for the KSK rollover. Failure to update systems could result in issues with DNS resolution post-rollover.

Further details about the KSK rollover, including operational guidelines and technical resources, can be accessed on ICANN's KSK rollover information page.

About ICANN

ICANN's mission is to ensure a secure, stable, and unified global internet. Every time you connect online, you must input a unique address for your device to communicate with another. ICANN coordinates these unique identifiers globally, supporting the needs of its diverse community of participants since its inception in 1998 as a nonprofit organization. For more information, visit ICANN's website.