DNSSEC Denial-of-Service Attacks Show Technology's Fragility

Researchers disclosed two classes of DNS/DNSSEC weaknesses in 2024 — KeyTrap, which forces resolvers to perform excessive cryptographic validations causing resource exhaustion, and TuDoor, which exposes logic vulnerabilities enabling cache poisoning, DoS, and resource-consumption attacks across multiple DNS implementations. Major providers and vendors have applied patches and operational limits, but the report warns the core systemic issues in DNS/DNSSEC remain and that further coordinated fixes are required to prevent broad disruption of critical Internet infrastructure.