The main functionality of the Domain Name System (DNS) is to translate symbolic names into IP addresses. Since there is a growing demand for trustworthiness in the Internet many research articles consider DNS security issues. The reason is that DNS is a vital service for nearly all distributed applications based on the TCP/IP protocol suite. This article examines different possibilities to protect DNS transactions and shows an interesting alternative to the existing solutions.
This is necessary since all existing approaches show significant flaws in terms of manageability, usability, scalability, versatility, and realizability.