A fix has been implemented and we are monitoring the results.
Posted Jul 03, 2026 - 17:25 UTC
Update
Cloudflare is temporarily disabling DNSSEC validation for .AL domains on 1.1.1.1 resolver (as per RFC 7646) in order to allow .AL names to continue to resolve. DNSSEC validation will be re-enabled when the signing problems are known to have been resolved.