@InProceedings{obinna2026soups,
  author    = {Wisdom Obinna AND Katharina Barlage AND Florian Alt AND Harel Berger},
  booktitle = {{Twenty-First Symposium on Usable Privacy and Security}},
  title     = {{I See DNS People: DNS Resolver Security, Through Operator Perspectives and Practices}},
  year      = {2026},
  address   = {Hannover, Germany},
  month     = aug,
  note      = {obinna2026soups},
  publisher = {USENIX},
  series    = {SOUPS'26},
  abstract  = {We study how DNS resolver operators and security practitioners make DNS security decisions. Prior research has measured DNS security adoption rates and misconfiguration, but offers limited insight into why operators make the choices they do. To address this gap, we conducted semi-structured interviews with 24 DNS resolver operators and security practitioners from 14 countries, covering service providers, enterprises, and government organizations. Our analysis identifies three interconnected barriers impeding wider adoption. First, there is a gap between how complex DNSSEC is perceived and how complex it is in practice: operators frequently describe DNSSEC as intimidating prior to deployment, yet majority who deployed it reported the process simpler than expected. Two factors help explain why this gap persists. DNS suffers from systematic deprioritization: because DNS ``just works,'' organizations tend to pay less attention to DNS security until failure. Secondly, expertise gaps, combined with limited resources and coordination costs, amplify the prior two factors. Grounded in practitioners' own recommendations, we suggest actionable interventions to reduce the complexity of DNSSEC, such as clearer documentation and visible success stories, while also addressing its deprioritization through compliance mandates or security-as-a-mission framing.},
  timestamp = {2026.08.25},
  url       = {http://www.florian-alt.org/unibw/wp-content/publications/obinna2026soups.pdf},
}