The root DNSSEC trust anchor, the KSK or Key Signing Key, was rolled, i.e. renewed, on Sunday 2026-10-11. I’m not involved in the process, but I am an avid follower, and as such I tooted before the event and after: During a discussion on Tuesday which began because of a quite disastrous and currently ongoing failure in the German medical IT infrastructure of Gematik, it turns out that some people I thought would know all about this don’t, so I’ll jot down some notes about how I think it ties in together. Let’s begin with trust anchor; what is that?...