DENIC DNSSEC outage knocks .de offline

DNSSEC is supposed to increase trust, but when the registry side breaks, it fails hard and makes the whole zone look dead to validators. This is a reminder that DNS security is only as reliable as the weakest signing or delegation step.

• –The blast radius was large because DENIC sits at the center of the .de namespace
• –Non-validating resolvers and caches likely masked the problem for some users, which made the incident look inconsistent
• –Registry outages like this are especially painful because they break reachability rather than just degrading performance
• –The public status page is green now, suggesting the incident was resolved quickly, even if the root cause was messy