Internet Assigned Numbers Authority, the ICANN-run function that maintains the DNS root zone, IP address pools and protocol parameter registries.
The DNS root zone moved from KSK-2017 to KSK-2024 on October 11, its second root key rollover after the first in 2018. Local press tied Maxis DNS failures in Malaysia to the change, but Maxis has not confirmed a cause.
Reality
IANA lists KSK-2024 (key tag 38696) as the root zone's signing key since 11 October 2026, with KSK-2017 no longer signing. Cached DNSKEY data delays failure on resolvers that trust only the old key, so a resolver that still answers has not proved it trusts the new one.
Reality
IANA switches DNS root zone signing to KSK-2024 on October 11, 2026, retiring KSK-2017 after eight years. Validators that never promoted the new key will SERVFAIL or silently stop validating, with too little time left for RFC 5011's 30-day hold-down to catch up.
Reality
The IETF published RFC 10008 in June 2026 and IANA registered QUERY as safe and idempotent, so a structured read no longer has to travel as a POST. Whether the response stays cacheable depends on the caches on the path.
Reality
third-party.com is an ordinary registered domain that developer documentation has used as a stand-in for years. It currently answers with a fake Cloudflare check that tells Windows users to paste a PowerShell command into the Run box.
Reality
Manifold Security found third-party.com, a placeholder in more than 1,700 public repositories, serving a ClickFix clipboard lure to Windows browsers since at least June 2026. Static scans of the same files come back clean, because the server chooses what to send.
Reality