LOS ANGELES, May 20, 2026 /PRNewswire/ -- The Internet Corporation for Assigned Names and Numbers (ICANN) today announced that it is planning to change the trust anchor for the Domain Name System (DNS) on 11 October 2026. This change, known as a rollover, is an important step in maintaining the long-term security, stability, and resiliency of the DNS.
The trust anchor is formally known as the Domain Name System Security Extensions (DNSSEC) root zone Key Signing Key (KSK). The KSK is the cryptographic key at the core of the DNSSEC trust anchor and is used to verify that DNS responses are legitimate and have not been modified in transit. DNSSEC helps ensure that Internet users receive authentic DNS data when accessing websites and online services. The rollover process replaces the current KSK with a new one, to maintain strong cryptographic security protections across the global DNS.
