Resolution Issues for .AL Domains

Resolved

This incident has been resolved.

Update

We are continuing to monitor for any further issues.

Update

A fix has been implemented and we are monitoring the results.

Update

Cloudflare is temporarily disabling DNSSEC validation for .AL domains on 1.1.1.1 resolver (as per RFC 7646) in order to allow .AL names to continue to resolve. DNSSEC validation will be re-enabled when the signing problems are known to have been resolved.

See RFC 7646 for more details: https://datatracker.ietf.org/doc/html/rfc7646

Update

We are observing issues with authoritative resolution for the .AL TLD because of DNSSEC issues at the TLD.