Frankfurt am Main, 6 May 2026
Invalid DNSSEC signatures affected accessibility – normal service has been restored.
On the evening of 5 May 2026, a technical incident occurred in the Domain Name System (DNS) for the .de domain extension from 21:57 onwards. This led to noticeable impact to the availability of .de domains.
At 00:08 on 6 May, DENIC initiated the distribution of a correct DNS zone. The operational status prior to the outage was fully restored by 01:15.
The outage was related to DNSSEC signing. During the period described, incorrect DNSSEC signatures were propagated. Not all users were affected to the same extent. Where validating DNS resolvers were used for name resolution, DNS responses for all .de domains were treated as bogus. Some resolver operators temporarily suspended DNSSEC validation for .de domains as a mitigating measure.
+++ UPDATE +++ As of: Wednesday, May 6, 2:30 p.m.
The outage is linked to a routine, scheduled key rollover. During this process, non-validatable signatures were generated and distributed. As a precautionary measure, future rollovers have been suspended until the exact technical causes have been identified.
