Eric Osterweil: 20 Years of DNSSEC Research

The Domain Name System’s (DNS’) Security Extensions (DNSSEC) began their global rollout almost 20 years ago. At that time, DNSSEC was essentially an experiment to see if we could upgrade an existing core Internet protocol with cryptographic protections, and if its design would benefit the Internet. What has become clear since then is that DNSSEC’s design (though not at all perfect) not only befits its purpose, but has also provided unanticipated benefits. In this talk I will discuss a few key research findings from my roughly 20 years of DNSSEC research, and I will use them to motivate a vision that the DNSSEC deployment can offer important insights for designing a future object-security service model for the Internet.

Slides