key rollover

The planned replacement of a DNSSEC (glossary)DNSSEC Domain Name System Security Extensions Digital signatures that prove DNS answers are genuine and unchanged. Full definition of DNSSEC key with a new one. It is done in careful steps so that resolvers (glossary)resolver The DNS server that looks up domain names on behalf of users. Full definition of resolver always have a key they can use to check signatures. A mistake can make a domain unreachable. Changing the root zone (glossary)root zone The top of the DNS, listing every TLD and its name servers. Full definition of root zone's key is a rare, closely watched event.