{
  "is": "issue",
  "title": "DNSSEC outage",
  "body": "\u003cp\u003eAll services are affected by a major DNS outage.\u003c/p\u003e\n\u003cp\u003eIt seems like DNSSEC key rotations happened sooner than expected: the\nrotation was planned for November 2025, and it happened today,\nbreaking DNS resolution for all \u003ccode\u003etorproject.org\u003c/code\u003e domains around\n2025-09-20 17:40:10UTC.\u003c/p\u003e\n\u003cp\u003eKeys were updated in the \u003ccode\u003e.org\u003c/code\u003e registry at around 19:32UTC. With the\none hour time-to-live record on \u003ccode\u003e.org\u003c/code\u003e DS records, we expect this\noutage will be fully resolved by 20:32UTC.\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003e.net\u003c/code\u003e domains have a much longer time to live (a full day), and\nwe believe this lessened the impact of the outage on that domain. The\nDS keys were updated at 20:32UTC, which gave a window of about three\nhours for the outage on that domain, for which the outage is actually\na full day, with service fully returning on 2025-09-21 20:32.\u003c/p\u003e\n\u003cp\u003eDetails in the GitLab incident \u003ca href=\"https://gitlab.torproject.org/tpo/tpa/team/-/issues/42297\"\u003etpo/tpa/team#42297\u003c/a\u003e.\u003c/p\u003e\n",
  "createdAt": "2025-09-20 17:40:10 +0000 UTC",
  "lastMod": "2026-06-02 16:38:52 -0400 -0400",
  "permalink": "https://torprojectstatus.org/issues/2025-09-20-dnssec-outage/",
  "severity": "down",
  "resolved": true,
  "informational": false,
  "resolvedAt": "2025-09-20T20:32:00-00:00",
  "affected": ["DNS"],
  "filename": "2025-09-20-dnssec-outage.md"
}