● Covered by 1 source · 1 reportMedium impact
Albania's .al TLD DNSSEC failure led to validation issues for Cloudflare's 1.1.1.1
On July 3, 2026, Albania's .al TLD experienced DNSSEC validation failures due to a key rollover error, blocking public access to various domains. Cloudflare's 1.1.1.1 responded by bypassing DNSSEC validation, introducing a new error notification to users about this change.
Key points
- Albania's .al TLD experienced DNSSEC failures on July 3, 2026.
- Cloudflare's 1.1.1.1 bypassed DNSSEC validation for .al domains.
- New Extended DNS Error code indicates DNSSEC validation bypass.
Incident Overview
On July 3, 2026, the Albanian communications authority attempted a DNSSEC key rollover for the .al TLD, which led to validation failures. The issue rendered numerous Albanian government, financial, and media sites unreachable for users relying on validating DNS resolvers.
Impact of Validation Failures
The failure affected every .al domain during the incident, disrupting access for users and potentially impacting services across various sectors. Cloudflare's public resolver, 1.1.1.1, was among the main resolvers that encountered these issues.
Cloudflare's Response
Following the incident, Cloudflare implemented a Negative Trust Anchor (NTA) for .al, allowing resolution while bypassing DNSSEC validation. This approach, while restoring access, also included new measures to inform users about the lack of validation.
Introduction of Extended DNS Error Code
For the first time, 1.1.1.1 added a new Extended DNS Error (EDE) code to responses affected by the NTA. This was a significant development, as it enabled users to recognize that DNSSEC validation had been bypassed, informing them of potential security risks.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
On July 3, 2026, Albania's .al TLD experienced DNSSEC validation failures due to a key rollover error, blocking public access to various domains. Cloudflare's 1.1.1.1 responded by bypassing DNSSEC validation, introducing a new error notification to users about this change.