SECURITY OF THE DNSSEC PROTOCOL AND ITS IMPACT ON ONLINE PRIVACY PROTECTION

Abstract

The theme of the research paper and its chapters revolve around the security of the DNSSEC protocol and its impact on online privacy. The study delves into the intricacies of the Domain Name System (DNS), exploring its fundamental workings, hierarchical architecture, and the role of the DNS root server, as well as the entities responsible for hosting the 13 DNS Root servers. The paper also examines various types of DNS attacks, including DNS Spoofing, Man-in-the-Middle attacks, DNS cache poisoning, and DNS hijacking, shedding light on the vulnerabilities within the DNS infrastructure. A significant portion of the research is dedicated to the description of DNSSEC (Domain Name System Security Extensions), emphasizing its importance and functionality within DNS zones. This includes an analysis of the mechanisms behind DNSSEC, such as RRSIG, Zone Signing Keys (ZSK), DNSKEY, and Key Signing Keys (KSK), along with discussions on trust establishment in specific DNS zones