Tag
deployment-safety
Safeguard articles tagged "deployment-safety" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Infrastructure Security
When DNSSEC Goes Wrong: The .de TLD Signing Failure That Took Down German Domains (May 5, 2026)
On May 5, 2026, DENIC published unvalidatable DNSSEC signatures for the .de zone after a deployment defect made its signer generate three key pairs instead of one. Validating resolvers worldwide, including Cloudflare's 1.1.1.1, were forced to return SERVFAIL.
May 7, 202613 min read
Cloud Security
Cloudflare Code Orange Fail Small: What the Resilience Plan Actually Changes
After November and December 2025 outages, Cloudflare declared Code Orange and shipped a Health Mediated Deployment system, break-glass dependency audits, and graceful-degradation rewrites.
Jan 20, 20267 min read