Root DNSSEC trust anchors
Summary
The article explains the latest root DNSSEC trust anchor rollover (KSK-2024) and how DNS resolvers validate DNS data using trust anchors. It includes details on the root-anchors.xml, how to verify using OpenSSL, DS/DNSKEY generation, and practical config snippets for BIND, Unbound, and other resolvers, plus the Gematik incident context.