Loading content/issues/2025-09-20-dnssec-outage.md +8 −10 Original line number Diff line number Diff line Loading @@ -13,15 +13,13 @@ section: issue All services are affected by a major DNS outage. It seems like DNSSEC key rotations went out much sooner than we expected: we were planning for that rotation in November 2025, and it happened today. It seems like DNSSEC key rotations happened sooner than expected: the rotation was planned for November 2025, and it happened today, breaking DNS resolution for all `torproject.org` domains around 2025-09-20 17:40:10UTC. Specifically, the key revocation was marked to be 2025-09-20 17:40:10UTC. Keys were updated in the `.org` registry at around 19:32UTC. With the one hour time-to-live record on `.org` DS records, we expect this outage will be fully resolved by 20:32UTC. Keys were updated in the `.org` registry at around 19:32UTC on 2025-09-20. With the one hour time-to-live record on `.org` DS records, we expect this outage will be fully resolved by 20:32UTC. Details and post-mortem will be provided in GitLab incident [tpo/tpa/team#42297](https://gitlab.torproject.org/tpo/tpa/team/-/issues/42297). Details in the GitLab incident [tpo/tpa/team#42297](https://gitlab.torproject.org/tpo/tpa/team/-/issues/42297). Loading
content/issues/2025-09-20-dnssec-outage.md +8 −10 Original line number Diff line number Diff line Loading @@ -13,15 +13,13 @@ section: issue All services are affected by a major DNS outage. It seems like DNSSEC key rotations went out much sooner than we expected: we were planning for that rotation in November 2025, and it happened today. It seems like DNSSEC key rotations happened sooner than expected: the rotation was planned for November 2025, and it happened today, breaking DNS resolution for all `torproject.org` domains around 2025-09-20 17:40:10UTC. Specifically, the key revocation was marked to be 2025-09-20 17:40:10UTC. Keys were updated in the `.org` registry at around 19:32UTC. With the one hour time-to-live record on `.org` DS records, we expect this outage will be fully resolved by 20:32UTC. Keys were updated in the `.org` registry at around 19:32UTC on 2025-09-20. With the one hour time-to-live record on `.org` DS records, we expect this outage will be fully resolved by 20:32UTC. Details and post-mortem will be provided in GitLab incident [tpo/tpa/team#42297](https://gitlab.torproject.org/tpo/tpa/team/-/issues/42297). Details in the GitLab incident [tpo/tpa/team#42297](https://gitlab.torproject.org/tpo/tpa/team/-/issues/42297).
