nog.fi meeting 2026.06

In October 2026, ICANN will conduct the next root zone KSK rollover, the first since the 2018 DNS root KSK rollover. For network operators running validating resolvers, this should now be a routine event, provided that root trust anchors are correctly managed using RFC 5011, or operated using RFC 9718

This talk is a practical, no-nonsense walkthrough of how to confirm your infrastructure is ready. Aimed at technical audiences, it focuses on simple, actionable checks operators can perform today: verifying that resolvers use managed trust anchors, confirming the active root KSK, and inspecting RFC 5011 state where available. We will cover concrete commands and expected outputs for common resolver software that can be integrated into existing operational workflows.

The goal is straightforward: give operators a short, reliable checklist they can run in minutes to ensure their resolvers will seamlessly follow the rollover.