DNSSEC: An Introduction

This post introduces DNSSEC as a set of security extensions to DNS that provide the means for authenticating DNS records. It explains the inherent insecurity of traditional DNS, highlighting on-path attacker attacks and Kaminsky's cache poisoning attack. The post details how DNS works, including its hierarchical namespace and the role of authoritative servers and resolvers. It announces Cloudflare's plan to introduce DNSSEC in the next six months, with Olafur Gudmundsson, one of the inventors of DNSSEC, leading the project.