Just like changing password, ICANN has decided to rollover DNS root zone KSK2010 to KSK2017. Root zone Key Signing Key (KSK) is the top cryptographic key on DNSSEC mechanism. Affected Systems You need to bother about it if ✔ You are running recursive/caching only DNS sever ✔ Your DNS server is doing DNSSEC…