You sometimes can perform an invalidation, but it's a manual process and you need to know who to ask. Slack did this when they botched their DNSSEC rollout[1]:

You sometimes can perform an invalidation, but it's a manual process and you need to know who to ask. Slack did this when they botched their DNSSEC rollout[1]: > Our team quickly started contacting major ISPs and operators that run public DNS resolvers, with the request to flush all cached records for slack.com. DNSSEC is another part of DNS that is still hard to learn. [1] https://news.ycombinator.com/reply?id=36910054&goto=item%3Fid%3D36909427%2336910054 https://news.ycombinator.com/reply?id=36910054&goto=item%3Fi...