A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed
On July 3, 2026, the Albanian communications authority (AKEP), the operator of the .al country-code top-level domain (TLD) of Albania, attempted a DNSSEC key rollover. Something went wrong, resulting in DNSSEC validation failures. Any validating DNS resolver receiving these signatures was required by the DNSSEC specification to reject them and return errors to clients. That includes 1.1.1.1, the public DNS resolver operated by Cloudflare.The .al TLD is the online home of Albanian government serv...
Read more at blog.cloudflare.com