DARCH Get started

Notes

Notes from running the platform

What went wrong, what we found and what we changed, written for clients and for anyone running similar systems. Newest first.

When the internet's root key changed, our outgoing mail waited nine hours

. The DNS root zone's signing key changed on 11 October 2026. Our mail server's resolver did not yet trust the new key, so outgoing mail was held overnight. Nothing was lost. Why it happened, and the checks that now catch it.