DNSSEC-Related Outages: Analysis and Impact Assessment in DNS Security

Explore a 32-minute conference talk from NANOG examining the real-world impact and frequency of DNSSEC-related outages through active probe-driven data analysis. Learn how DNSSEC-related outages are defined and quantified, compare them to general DNS outages and other cryptography-secured systems like X.509 and RPKI, and gain evidence-based insights from years of deployment data. Understand the technical challenges and operational resistance faced during DNSSEC implementation, evaluate whether the technology's benefits outweigh its potential to increase DNS fragility, and make informed decisions about DNSSEC deployment based on comprehensive historical performance data presented by John Kristoff from Dataplane.org and UIC.