Public Interest Registry (PIR), the registry operator for .ORG, has announced changes to the DNSSEC digest algorithms supported for domain create and update operations.
During Q4 2026, PIR will deprecate the following digest types:
- Digest Type 1 – SHA-1
- Digest Type 3 – GOST R 34.11-94
Existing .ORG domains using these digest types will continue to work and their DS records will remain published. However, new domain registrations or updates attempting to submit DS records using Digest Type 1 or 3 will be rejected.
At the same time, PIR will introduce support for:
- Digest Type 5 – GOST R 34.11-2012
- Digest Type 6 – SM3
Domain holders and DNS operators using DNSSEC should review their .ORG domains and migrate away from Digest Types 1 and 3 where applicable.
The changes are being introduced in line with updated DNSSEC recommendations in RFC 9904, RFC 9905 and RFC 9906. PIR will announce the exact implementation date separately, with at least 90 days’ notice.