Eric Osterweil: 20 Years of DNSSEC Research

Insights for the Road Ahead, from ~20 Years of DNSSEC Research
  • When Oct 25, 2023 from 01:00 PM to 02:00 PM (Europe/Berlin / UTC200)
  • Where R 460
  • Contact Name
  • Add event to calendar iCal

The Domain Name System’s (DNS’) Security Extensions (DNSSEC) began their global rollout almost 20 years ago. At that time, DNSSEC was essentially an experiment to see if we could upgrade an existing core Internet protocol with cryptographic protections, and if its design would benefit the Internet. What has become clear since then is that DNSSEC’s design (though not at all perfect) not only befits its purpose, but has also provided unanticipated benefits. In this talk I will discuss a few key research findings from my roughly 20 years of DNSSEC research, and I will use them to motivate a vision that the DNSSEC deployment can offer important insights for designing a future object-security service model for the Internet.