If you are experiencing DNSSEC lookup validation failures for domains under the .UK TLD, you may (engineering-speak for almost definitely) need to flush your name server caches. http://www.nominet.org.uk/registrars/systems/serviceannouncements/ DNSSEC validation issue Due to a failure of a Hardware Security Module (HSM), as a matter of precaution, we failed over to our backup signing system this afternoon. As the backup system did not use the exact same Zone Signing Keys (ZSK), there is the possibility of validation failures. To make sure validators use the correct zone signing keys, caches might need to be flushed.