Resolution Issues for .de Domains

This incident has been resolved.

We have removed our mitigations and we are monitoring the results.

The issue has been identified as a DNSSEC signing problem at DENIC, the organization responsible for the .DE top-level domain. Cloudflare has temporarily disabled DNSSEC validation for .de domains on 1.1.1.1 resolver (as per RFC 7646) in order to allow .DE names to continue to resolve. DNSSEC validation will be re-enabled when the signing problems at DENIC are known to have been resolved. See RFC 7646 for more details: https://datatracker.ietf.org/doc/html/rfc7646

We are continuing to work on a fix for this issue.

We are continuing to work on a fix for this issue.

The issue has been identified as a DNSSEC signing problem at DENIC, the organization responsible for the .DE top-level domain. Cloudflare is temporarily disabling DNSSEC validation for .de domains on 1.1.1.1 resolver (as per RFC 7646) in order to allow .DE names to continue to resolve. DNSSEC validation will be re-enabled when the signing problems at DENIC are known to have been resolved. See RFC 7646 for more details: https://datatracker.ietf.org/doc/html/rfc7646

The issue has been identified and a fix is being implemented.