DNSSEC's Low Adoption Rate: A Security Flaw and Lack of User Awareness

Despite its aim to enhance domain name system security, DNSSEC's deployment rate remains worryingly low at 34%. This article analyzes the reasons behind this: the lack of user visibility is the core issue. Unlike HTTPS's padlock icon, DNSSEC doesn't directly inform users about the security of their connection, making it difficult for them to perceive its value. Furthermore, DNSSEC's long dependency chain, requiring deployment from the root zone to leaf nodes, increases deployment difficulty. The article also explores technologies like DoH/DoT and their complementarity with DNSSEC, calling for continued efforts to improve DNS security.