Mark your calendar, on 11 October 2018, your resolvers will (should) do DNSSEC validation using the new KSK-2017 instead of the KSK-2010, otherwise you or your customers might run into some trouble. Exactly a year before, on 11 October 2017, the same Root Zone Key Signing Key (KSK) roll was scheduled, but it was suspended a few weeks before the set date - as it was found that there was still a considerable amount of validating resolvers without the latest root key. After extensive community review, the new flag day has been set for 11 October 2018.
Read more: Watch Out for the DNSSEC KSK Rollover this October