On 11 October 2018, ICANN will change or “roll over” the DNSSEC key signing key (KSK) of the DNS root zone. Based on information from your network received at the DNS root name servers.
This could result in DNS resolvers (That have not been properly updated) failing after 11 October 2018.
The chances that you will be affected by this rollover are low, however to avoid potential disruption there are a few steps that can be taken to ensure you are covered.
If you are a user that relies on a resolver that performs DNSSEC validation, and that does not have the new KSK in their trust anchor configuration, you will see effects as early as 48 hours after the roll over.
The ICANN organisation has released information about the rollover and how to properly prepare for it on their website, which can be found here.