Publikations-Information

Download

Wisdom Obinna, Katharina Barlage, Florian Alt, Harel Berger
I See DNS People: DNS Resolver Security, Through Operator Perspectives and Practices
In SOUPS'26: Twenty-First Symposium on Usable Privacy and Security. August 25, 2026. USENIX, Hannover, Germany. (bib)

We study how DNS resolver operators and security practitioners make DNS security decisions. Prior research has measured DNS security adoption rates and misconfiguration, but offers limited insight into why operators make the choices they do. To address this gap, we conducted semi-structured interviews with 24 DNS resolver operators and security practitioners from 14 countries, covering service providers, enterprises, and government organizations. Our analysis identifies three interconnected barriers impeding wider adoption. First, there is a gap between how complex DNSSEC is perceived and how complex it is in practice: operators frequently describe DNSSEC as intimidating prior to deployment, yet majority who deployed it reported the process simpler than expected. Two factors help explain why this gap persists. DNS suffers from systematic deprioritization: because DNS “just works,” organizations tend to pay less attention to DNS security until failure. Secondly, expertise gaps, combined with limited resources and coordination costs, amplify the prior two factors. Grounded in practitioners' own recommendations, we suggest actionable interventions to reduce the complexity of DNSSEC, such as clearer documentation and visible success stories, while also addressing its deprioritization through compliance mandates or security-as-a-mission framing.