{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T14:58:04Z","timestamp":1773154684968,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":83,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,10,24]],"date-time":"2023-10-24T00:00:00Z","timestamp":1698105600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100001665","name":"Agence Nationale de la Recherche","doi-asserted-by":"publisher","award":["ANR-11-LABX-0025-01, ANR-19-CE25-0009-01"],"award-info":[{"award-number":["ANR-11-LABX-0025-01, ANR-19-CE25-0009-01"]}],"id":[{"id":"10.13039\/501100001665","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,10,24]]},"DOI":"10.1145\/3618257.3624835","type":"proceedings-article","created":{"date-parts":[[2023,10,23]],"date-time":"2023-10-23T00:19:52Z","timestamp":1698020392000},"page":"213-221","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Extended DNS Errors: Unlocking the Full Potential of DNS Troubleshooting"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-1094-7519","authenticated-orcid":false,"given":"Yevheniya","family":"Nosyk","sequence":"first","affiliation":[{"name":"Univ. Grenoble Alpes, CNRS, Grenoble INP, LIG, Grenoble, France"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4334-3260","authenticated-orcid":false,"given":"Maciej","family":"Korczy\u0144ski","sequence":"additional","affiliation":[{"name":"Univ. Grenoble Alpes, CNRS, Grenoble INP, LIG, Grenoble, France"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6950-6574","authenticated-orcid":false,"given":"Andrzej","family":"Duda","sequence":"additional","affiliation":[{"name":"Univ. Grenoble Alpes, CNRS, Grenoble INP, LIG, Grenoble, France"}]}],"member":"320","published-online":{"date-parts":[[2023,10,24]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"crossref","unstructured":"Donald E. Eastlake 3rd. 2000. Secret Key Establishment for DNS (TKEY RR). RFC 2930. (2000).","DOI":"10.17487\/rfc2930"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"crossref","unstructured":"Donald E. Eastlake 3rd. 2001. RSA\/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS). (May 2001).","DOI":"10.17487\/rfc3110"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"crossref","unstructured":"Donald E. Eastlake 3rd. 2013. Domain Name System (DNS) IANA Considerations. RFC 6895. (2013).","DOI":"10.17487\/rfc6895"},{"key":"e_1_3_2_1_4_1","volume-title":"Andrews","author":"Donald E.","year":"2016","unstructured":"Donald E. Eastlake 3rd and Mark P. Andrews. 2016. Domain Name System (DNS) Cookies. RFC 7873. (2016)."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423623"},{"key":"e_1_3_2_1_6_1","volume-title":"Return Extended EDNS Errors (EDE). https:\/\/gitlab.isc.org\/isc-projects\/bind9\/-\/issues\/1836. (May","author":"Andrews Mark","year":"2020","unstructured":"Mark Andrews. 2020. Return Extended EDNS Errors (EDE). https:\/\/gitlab.isc.org\/isc-projects\/bind9\/-\/issues\/1836. (May 2020)."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"Roy Arends and Matt Larson. 2023. DNS Error Reporting. Internet-Draft draft-ietf-dnsop-dns-error-reporting-04. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/draft-ietf-dnsop-dns-error-reporting\/04\/ Work in Progress.","DOI":"10.17487\/RFC9567"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"crossref","unstructured":"Roy Arends Geoffrey Sisson David Blacka and Ben Laurie. 2008. DNS Security (DNSSEC) Hashed Authenticated Denial of Existence. RFC 5155. (2008).","DOI":"10.17487\/rfc4956"},{"key":"e_1_3_2_1_9_1","unstructured":"Piet Barber and Matt Larson. 2006. Observed DNS Resolution Misbehavior. RFC 4697. (2006)."},{"key":"e_1_3_2_1_10_1","volume-title":"Common DNS Operational and Configuration Errors. RFC 1912","author":"Barr David","year":"1996","unstructured":"David Barr. 1996. Common DNS Operational and Configuration Errors. RFC 1912. (1996)."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"crossref","unstructured":"Piet Beertema. 1993. Common DNS Data File Configuration Errors. RFC 1537. (1993).","DOI":"10.17487\/rfc1537"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","unstructured":"Ray Bellis Stuart Cheshire John Dickinson Sara Dickinson Ted Lemon and Tom Pusateri. 2019. DNS Stateful Operations. RFC 8490. (2019).","DOI":"10.17487\/RFC8490"},{"key":"e_1_3_2_1_13_1","volume-title":"Overview of relevant DNS standards and drafts. https:\/\/powerdns.org\/dns-camel\/. (Feb","author":"Hubert Bert","year":"2023","unstructured":"Bert Hubert. 2023. Overview of relevant DNS standards and drafts. https:\/\/powerdns.org\/dns-camel\/. (Feb. 2023)."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1711.05696"},{"key":"e_1_3_2_1_15_1","unstructured":"Cali Dog Security. 2022. Certstream. (March 2022). https:\/\/calidog.io."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1452335.1452341"},{"key":"e_1_3_2_1_17_1","volume-title":"Understanding and Preparing for DNS Evolution","author":"Castro Sebastian","unstructured":"Sebastian Castro, Min Zhang, Wolfgang John, Duane Wessels, and Kimberly Claffy. 2010. Understanding and Preparing for DNS Evolution. TMA. Springer Berlin Heidelberg, Berlin, Heidelberg, 1--16."},{"key":"e_1_3_2_1_18_1","volume-title":"USENIX Security","author":"Chung Taejoong","unstructured":"Taejoong Chung, Roland van Rijswijk-Deij, Balakrishnan Chandrasekaran, David Choffnes, Dave Levin, Bruce M. Maggs, Alan Mislove, and Christo Wilson. 2017. A Longitudinal, End-to-End View of the DNSSEC Ecosystem. In USENIX Security. USENIX Association, Vancouver, BC, 1307--1322."},{"key":"e_1_3_2_1_19_1","volume-title":"Announcing experimental DDR in 1.1.1.1. https:\/\/blog.cloudflare.com\/announcing-ddr-support\/. (March","year":"2022","unstructured":"Cloudflare. 2022. Announcing experimental DDR in 1.1.1.1. https:\/\/blog.cloudflare.com\/announcing-ddr-support\/. (March 2022)."},{"key":"e_1_3_2_1_20_1","volume-title":"2023 a. Cloudflare Website and Online Services Terms of Use. https:\/\/www.cloudflare.com\/website-terms\/. (May","year":"2023","unstructured":"Cloudflare. 2023 a. Cloudflare Website and Online Services Terms of Use. https:\/\/www.cloudflare.com\/website-terms\/. (May 2023)."},{"key":"e_1_3_2_1_21_1","volume-title":"2023 b. Extended DNS error codes. https:\/\/developers.cloudflare.com\/1.1.1.1\/infrastructure\/extended-dns-error-codes\/. (Sept","year":"2023","unstructured":"Cloudflare. 2023 b. Extended DNS error codes. https:\/\/developers.cloudflare.com\/1.1.1.1\/infrastructure\/extended-dns-error-codes\/. (Sept. 2023)."},{"key":"e_1_3_2_1_22_1","volume-title":"https:\/\/gitlab.nic.cz\/knot\/knot-resolver. (Feb","author":"Knot Resolver CZ.NIC.","year":"2023","unstructured":"CZ.NIC. 2023. Knot Resolver. https:\/\/gitlab.nic.cz\/knot\/knot-resolver. (Feb. 2023)."},{"key":"e_1_3_2_1_23_1","volume-title":"Vixie","author":"da Silva Damas Joao","year":"2013","unstructured":"Joao da Silva Damas, Michael Graff, and Paul A. Vixie. 2013. Extension Mechanisms for DNS (EDNS(0)). RFC 6891. (2013)."},{"key":"e_1_3_2_1_24_1","volume-title":"DNSSEC Misconfigurations in Popular Domains","author":"Dai Tianxiang","unstructured":"Tianxiang Dai, Haya Shulman, and Michael Waidner. 2016. DNSSEC Misconfigurations in Popular Domains. In CANS. Springer International Publishing, Cham, 651--660."},{"key":"e_1_3_2_1_25_1","unstructured":"Peter B. Danzig Anant Kumar Steve Miller Clifford Neuman and Jon Postel. 1993. Common DNS Implementation Errors and Suggested Fixes. RFC 1536. (1993)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"crossref","unstructured":"D Dittrich and E Kenneally. 2012. The Menlo Report: Ethical Principles Guiding Information and Communication Technology Research. https:\/\/catalog.caida.org\/paper\/2012_menlo_report_actual_formatted. (2012).","DOI":"10.2139\/ssrn.2445102"},{"key":"e_1_3_2_1_27_1","volume-title":"Domain DNS Health Checker Tool. https:\/\/dnschecker.org\/domain-health-checker.php. (March","author":"Checker DNS","year":"2023","unstructured":"DNS Checker. 2023. Domain DNS Health Checker Tool. https:\/\/dnschecker.org\/domain-health-checker.php. (March 2023)."},{"key":"e_1_3_2_1_28_1","volume-title":"A DNS visualization tool. https:\/\/dnsviz.net. (Feb","year":"2023","unstructured":"DNSViz. 2023. A DNS visualization tool. https:\/\/dnsviz.net. (Feb. 2023)."},{"key":"e_1_3_2_1_29_1","volume-title":"IFIP Networking","author":"Doan Trinh Viet","unstructured":"Trinh Viet Doan, Justus Fries, and Vaibhav Bajpai. 2021. Evaluating Public DNS Services in the Wake of Increasing Centralization of DNS. In IFIP Networking. IEEE."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"crossref","unstructured":"Francis Dupont Stephen Morris Paul A. Vixie Donald E. Eastlake 3rd \u00d3lafur Gu\u00f0mundsson and Brian Wellington. 2020. Secret Key Transaction Authentication for DNS (TSIG). RFC 8945. (2020).","DOI":"10.17487\/RFC8945"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","unstructured":"Alain Durand Johan Stenstam and Pekka Savola. 2006. Operational Considerations and Issues with IPv6 DNS. RFC 4472. (2006).","DOI":"10.17487\/rfc4472"},{"key":"e_1_3_2_1_32_1","volume-title":"USENIX Security","author":"Durumeric Zakir","unstructured":"Zakir Durumeric, Eric Wustrow, and J. Alex Halderman. 2013. ZMap: Fast Internet-Wide Scanning and Its Security Applications. In USENIX Security. USENIX Association, Washington, D.C., 605--620."},{"key":"e_1_3_2_1_33_1","unstructured":"Rafael Elvira. 2022. The Case of the Recursive Resolvers. https:\/\/slack.engineering\/what-happened-during-slacks-dnssec-rollout\/. (2022)."},{"key":"e_1_3_2_1_34_1","volume-title":"Moura","author":"Foremski Pawe\u0142","year":"2019","unstructured":"Pawe\u0142 Foremski, Oliver Gasser, and Giovane C. M. Moura. 2019. DNS Observatory: The Big Picture of the DNS. In IMC. Association for Computing Machinery, New York, NY, USA, 87--100."},{"key":"e_1_3_2_1_35_1","volume-title":"An Empirical Reexamination of Global DNS Behavior","author":"Gao Hongyu","unstructured":"Hongyu Gao, Vinod Yegneswaran, Yan Chen, Phillip Porras, Shalini Ghosh, Jian Jiang, and Haixin Duan. 2013. An Empirical Reexamination of Global DNS Behavior. In SIGCOMM. Association for Computing Machinery, New York, NY, USA, 267--278."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"crossref","unstructured":"Wes Hardaker and Viktor Dukhovni. 2022. Guidance for NSEC3 Parameter Settings. RFC 9276. (2022).","DOI":"10.17487\/RFC9276"},{"key":"e_1_3_2_1_37_1","volume-title":"Poster: The Unintended Consequences of Algorithm Agility in DNSSEC","author":"Heftrig Elias","year":"2022","unstructured":"Elias Heftrig, Haya Shulman, and Michael Waidner. 2022. Poster: The Unintended Consequences of Algorithm Agility in DNSSEC. In CCS. Association for Computing Machinery, New York, NY, USA, 3363--3365."},{"key":"e_1_3_2_1_38_1","volume-title":"IPv6-specific misconfigurations in the DNS","author":"Hendriks Luuk","unstructured":"Luuk Hendriks, Pieter-Tjerk de Boer, and Aiko Pras. 2017. IPv6-specific misconfigurations in the DNS. In CNSM. IEEE Computer Society, Los Alamitos, CA, USA, 1--5."},{"key":"e_1_3_2_1_39_1","volume-title":"2023 a. DNSSEC Delegation Signer (DS) Resource Record (RR) Type Digest Algorithms. https:\/\/www.iana.org\/assignments\/ds-rr-types\/ds-rr-types.xhtml. (May","author":"IANA.","year":"2023","unstructured":"IANA. 2023 a. DNSSEC Delegation Signer (DS) Resource Record (RR) Type Digest Algorithms. https:\/\/www.iana.org\/assignments\/ds-rr-types\/ds-rr-types.xhtml. (May 2023)."},{"key":"e_1_3_2_1_40_1","volume-title":"2023 b. Domain Name System (DNS) Parameters (Extended DNS Error Codes). https:\/\/www.iana.org\/assignments\/dns-parameters\/dns-parameters.xhtml#extended-dns-error-codes. (Feb","author":"IANA.","year":"2023","unstructured":"IANA. 2023 b. Domain Name System (DNS) Parameters (Extended DNS Error Codes). https:\/\/www.iana.org\/assignments\/dns-parameters\/dns-parameters.xhtml#extended-dns-error-codes. (Feb. 2023)."},{"key":"e_1_3_2_1_41_1","volume-title":"2023 c. Domain Name System Security (DNSSEC) Algorithm Numbers. https:\/\/www.iana.org\/assignments\/dns-sec-alg-numbers\/dns-sec-alg-numbers.xhtml. (April","author":"IANA.","year":"2023","unstructured":"IANA. 2023 c. Domain Name System Security (DNSSEC) Algorithm Numbers. https:\/\/www.iana.org\/assignments\/dns-sec-alg-numbers\/dns-sec-alg-numbers.xhtml. (April 2023)."},{"key":"e_1_3_2_1_42_1","volume-title":"2023 d. IANA IPv4 Special-Purpose Address Registry. https:\/\/www.iana.org\/assignments\/iana-ipv4-special-registry\/iana-ipv4-special-registry.xhtml. (April","author":"IANA.","year":"2023","unstructured":"IANA. 2023 d. IANA IPv4 Special-Purpose Address Registry. https:\/\/www.iana.org\/assignments\/iana-ipv4-special-registry\/iana-ipv4-special-registry.xhtml. (April 2023)."},{"key":"e_1_3_2_1_43_1","volume-title":"Centralized Zone Data Service. (March","author":"ICANN.","year":"2022","unstructured":"ICANN. 2022. Centralized Zone Data Service. (March 2022). https:\/\/czds.icann.org."},{"key":"e_1_3_2_1_44_1","volume-title":"References to rfc8914. https:\/\/datatracker.ietf.org\/doc\/rfc8914\/referencedby\/. (March","author":"IETF.","year":"2023","unstructured":"IETF. 2023. References to rfc8914. https:\/\/datatracker.ietf.org\/doc\/rfc8914\/referencedby\/. (March 2023)."},{"key":"e_1_3_2_1_45_1","volume-title":"https:\/\/gitlab.isc.org\/isc-projects\/bind9. (April","author":"Internet Systems Consortium","year":"2023","unstructured":"Internet Systems Consortium. 2023. BIND. https:\/\/gitlab.isc.org\/isc-projects\/bind9. (April 2023)."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3517745.3561434"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"crossref","unstructured":"Jelte Jansen. 2009. Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC. RFC 5702. (2009).","DOI":"10.17487\/rfc5702"},{"key":"e_1_3_2_1_48_1","volume-title":"GRooT: Proactive Verification of DNS Configurations","author":"Reddy Kakarla Siva Kesava","unstructured":"Siva Kesava Reddy Kakarla, Ryan Beckett, Behnaz Arzani, Todd Millstein, and George Varghese. 2020. GRooT: Proactive Verification of DNS Configurations. In SIGCOMM. Association for Computing Machinery, New York, NY, USA, 310--328."},{"key":"e_1_3_2_1_49_1","volume-title":"SCALE: Automatically Finding RFC Compliance Bugs in DNS Nameservers","author":"Reddy Kakarla Siva Kesava","year":"2022","unstructured":"Siva Kesava Reddy Kakarla, Ryan Beckett, Todd Millstein, and George Varghese. 2022. SCALE: Automatically Finding RFC Compliance Bugs in DNS Nameservers. In NSDI. USENIX Association, Renton, WA, 307--323."},{"key":"e_1_3_2_1_50_1","volume-title":"Towards Classification of DNS Erroneous Queries","author":"Kazato Yuta","unstructured":"Yuta Kazato, Kensuke Fukuda, and Toshiharu Sugawara. 2013. Towards Classification of DNS Erroneous Queries. AIEC. Association for Computing Machinery, New York, NY, USA, 25--32."},{"key":"e_1_3_2_1_51_1","volume-title":"Version 2. RFC 6781.","author":"Kolkman Olaf","year":"2012","unstructured":"Olaf Kolkman, Matthijs Mekking, and R. (Miek) Gieben. 2012. DNSSEC Operational Practices, Version 2. RFC 6781. (2012)."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC8914"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3215753"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"crossref","unstructured":"Paul Mockapetris. 1987 a. Domain names - concepts and facilities. RFC 1034. (1987).","DOI":"10.17487\/rfc1034"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"crossref","unstructured":"Paul Mockapetris. 1987 b. Domain names - implementation and specification. RFC 1035. (1987).","DOI":"10.17487\/rfc1035"},{"key":"e_1_3_2_1_56_1","volume-title":"TsuNAME: Exploiting Misconfiguration and Vulnerability to DDoS DNS","author":"Moura Giovane CM","unstructured":"Giovane CM Moura, Sebastian Castro, John Heidemann, and Wes Hardaker. 2021. TsuNAME: Exploiting Misconfiguration and Vulnerability to DDoS DNS. In IMC. Association for Computing Machinery, New York, NY, USA, 398--418."},{"key":"e_1_3_2_1_57_1","volume-title":"https:\/\/github.com\/NLnetLabs\/unbound. (Feb","year":"2023","unstructured":"NLnetLabs. 2023. Unbound. https:\/\/github.com\/NLnetLabs\/unbound. (Feb. 2023)."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"crossref","unstructured":"Mark Nottingham and Piotr Sikora. 2022. The Proxy-Status HTTP Response Header Field. RFC 9209. (2022).","DOI":"10.17487\/RFC9209"},{"key":"e_1_3_2_1_59_1","volume-title":"2004 a. Distributed DNS Troubleshooting","author":"Pappas Vasileios","unstructured":"Vasileios Pappas, Patrik F\u00e4ltstr\u00f6m, Daniel Massey, and Lixia Zhang. 2004 a. Distributed DNS Troubleshooting. In NetT. Association for Computing Machinery, New York, NY, USA, 265--270."},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/1030194.1015503"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/2896816"},{"key":"e_1_3_2_1_62_1","volume-title":"Samaneh Tajalizadehkhoob, Maciej Korczy\u0144ski, and Wouter Joosen.","author":"Pochat Victor Le","year":"2019","unstructured":"Victor Le Pochat, Tom Van Goethem, Samaneh Tajalizadehkhoob, Maciej Korczy\u0144ski, and Wouter Joosen. 2019. Tranco: A Research-Oriented Top Sites Ranking Hardened Against Manipulation. In NDSS. The Internet Society, Reston, The USA."},{"key":"e_1_3_2_1_63_1","volume-title":"pdns. https:\/\/github.com\/PowerDNS\/pdns. (Feb","author":"DNS.COM BV.","year":"2023","unstructured":"PowerDNS.COM BV. 2023. pdns. https:\/\/github.com\/PowerDNS\/pdns. (Feb. 2023)."},{"key":"e_1_3_2_1_64_1","volume-title":"RFC 8914 - Extended error for No Reachable Authority. https:\/\/gitlab.isc.org\/isc-projects\/bind9\/-\/issues\/2269. (Nov","author":"Risk Vicky","year":"2020","unstructured":"Vicky Risk. 2020. RFC 8914 - Extended error for No Reachable Authority. https:\/\/gitlab.isc.org\/isc-projects\/bind9\/-\/issues\/2269. (Nov. 2020)."},{"key":"e_1_3_2_1_65_1","volume-title":"RFC 8914 - DNSSEC validation failures. https:\/\/gitlab.isc.org\/isc-projects\/bind9\/-\/issues\/2715. (May","author":"Risk Vicky","year":"2021","unstructured":"Vicky Risk. 2021. RFC 8914 - DNSSEC validation failures. https:\/\/gitlab.isc.org\/isc-projects\/bind9\/-\/issues\/2715. (May 2021)."},{"key":"e_1_3_2_1_66_1","unstructured":"Scott Rose Matt Larson Dan Massey Rob Austein and Roy Arends. 2005 a. Protocol Modifications for the DNS Security Extensions. RFC 4035. (2005)."},{"key":"e_1_3_2_1_67_1","unstructured":"Scott Rose Matt Larson Dan Massey Rob Austein and Roy Arends. 2005 b. Resource Records for the DNS Security Extensions. RFC 4034. (2005)."},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"crossref","unstructured":"Scott Rose and Wouter Wijngaards. 2012. DNAME Redirection in the DNS. RFC 6672. (2012).","DOI":"10.17487\/rfc6672"},{"key":"e_1_3_2_1_69_1","volume-title":"Multi-Instance Service Disruption on","year":"2021","unstructured":"Salesforce. 2021. Multi-Instance Service Disruption on May 11-12, 2021. https:\/\/help.salesforce.com\/s\/articleView?id=000390251&type=1. (17 08 2021)."},{"key":"e_1_3_2_1_70_1","volume-title":"Passive DNS Data Sharing. (March","author":"Europe SIE","year":"2022","unstructured":"SIE Europe. 2022. Passive DNS Data Sharing. (March 2022). https:\/\/www.sie-europe.net."},{"key":"e_1_3_2_1_71_1","volume-title":"Anyone else seeing DNSSEC failures from EU Commission? (european-union.europa.eu). https:\/\/seclists.org\/nanog\/2021\/Dec\/94. (08 12","author":"Smith Laura","year":"2021","unstructured":"Laura Smith. 2021. Anyone else seeing DNSSEC failures from EU Commission? (european-union.europa.eu). https:\/\/seclists.org\/nanog\/2021\/Dec\/94. (08 12 2021)."},{"key":"e_1_3_2_1_72_1","volume-title":"k claffy, and A Sperotto","author":"Sommese R","year":"2020","unstructured":"R Sommese, G Moura, M Jonker, R Van Rijswijk-Deij, A Dainotti, k claffy, and A Sperotto. 2020. When Parents and Children Disagree: Diving into DNS Delegation Inconsistency. In PAM. Springer International Publishing, Cham, 175--189."},{"key":"e_1_3_2_1_73_1","volume-title":"DNS Firewall for PowerDNS. https:\/\/docs.spamhaus.com\/dns-firewall\/docs\/source\/configuration\/power_dns_config.html. (Feb","author":"Spamhaus","year":"2023","unstructured":"Spamhaus technology. 2023. DNS Firewall for PowerDNS. https:\/\/docs.spamhaus.com\/dns-firewall\/docs\/source\/configuration\/power_dns_config.html. (Feb. 2023)."},{"key":"e_1_3_2_1_74_1","volume-title":"How Ready is DNS for\u00a0an\u00a0IPv6-Only World?","author":"Streibelt Florian","unstructured":"Florian Streibelt, Patrick Sattler, Franziska Lichtblau, Carlos H. Gan\u00e1n, Anja Feldmann, Oliver Gasser, and Tobias Fiebig. 2023. How Ready is DNS for\u00a0an\u00a0IPv6-Only World?. In PAM. Springer Nature Switzerland, Cham, 525--549."},{"key":"e_1_3_2_1_75_1","volume-title":"Extended DNS Error support for Unbound. https:\/\/blog.nlnetlabs.nl\/extended-dns-error-support-for-unbound\/. (June","author":"Lnet Labs Team","year":"2022","unstructured":"Team NLnet Labs. 2022. Extended DNS Error support for Unbound. https:\/\/blog.nlnetlabs.nl\/extended-dns-error-support-for-unbound\/. (June 2022)."},{"key":"e_1_3_2_1_76_1","volume-title":"Pallavi Aras, and Allison Mankin.","author":"Toorop Willem","year":"2021","unstructured":"Willem Toorop, Sara Dickinson, Shivan Kaul Sahib, Pallavi Aras, and Allison Mankin. 2021. DNS Zone Transfer over TLS. RFC 9103. (Aug. 2021)."},{"key":"e_1_3_2_1_77_1","volume-title":"Xin Wang, Muhammad Wasif, Ficky Fatturrahman, and Fernando A. Kuipers.","author":"van Adrichem Niels L. M.","year":"2015","unstructured":"Niels L. M. van Adrichem, Norbert Blenn, Antonio Reyes L\u00faa, Xin Wang, Muhammad Wasif, Ficky Fatturrahman, and Fernando A. Kuipers. 2015. A Measurement Study of DNSSEC Misconfigurations. Security Informatics, Vol. 4, 1 (19 Oct 2015), 8."},{"key":"e_1_3_2_1_78_1","volume-title":"https:\/\/dnssec-analyzer.verisignlabs.com. (Feb","author":"Labs VERISIGN","year":"2023","unstructured":"VERISIGN Labs. 2023. DNSSEC Analyzer. https:\/\/dnssec-analyzer.verisignlabs.com. (Feb. 2023)."},{"key":"e_1_3_2_1_79_1","unstructured":"Paul A. Vixie Susan Thomson Yakov Rekhter and Jim Bound. 1997. Dynamic Updates in the Domain Name System (DNS UPDATE). RFC 2136. (1997)."},{"key":"e_1_3_2_1_80_1","volume-title":"Measurement Survey of Server-side DNSSEC Adoption","author":"Wander Matth\u00e4us","unstructured":"Matth\u00e4us Wander. 2017. Measurement Survey of Server-side DNSSEC Adoption. In TMA. IEEE."},{"key":"e_1_3_2_1_81_1","unstructured":"D Wessels and M Fomenkov. 2003. Wow That's a Lot of Packets. In PAM."},{"key":"e_1_3_2_1_82_1","volume-title":"A Deep Dive into DNS Query Failures","author":"Yang Donghui","unstructured":"Donghui Yang, Zhenyu Li, and Gareth Tyson. 2020. A Deep Dive into DNS Query Failures. In USENIX ATC. USENIX Association, USA, 507--514."},{"key":"e_1_3_2_1_83_1","volume-title":"Comcast Releases Detailed Analysis of NASA.gov DNSSEC Validation Failure. https:\/\/www.internetsociety.org\/blog\/2012\/01\/comcast-releases-detailed-analysis-of-nasa-gov-dnssec-validation-failure\/. (25 01","author":"York Dan","year":"2012","unstructured":"Dan York. 2012. Comcast Releases Detailed Analysis of NASA.gov DNSSEC Validation Failure. https:\/\/www.internetsociety.org\/blog\/2012\/01\/comcast-releases-detailed-analysis-of-nasa-gov-dnssec-validation-failure\/. (25 01 2012)."}],"event":{"name":"IMC '23: ACM Internet Measurement Conference","location":"Montreal QC Canada","acronym":"IMC '23","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the 2023 ACM on Internet Measurement Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3618257.3624835","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3618257.3624835","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T13:19:21Z","timestamp":1755868761000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3618257.3624835"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,24]]},"references-count":83,"alternative-id":["10.1145\/3618257.3624835","10.1145\/3618257"],"URL":"https:\/\/doi.org\/10.1145\/3618257.3624835","relation":{},"subject":[],"published":{"date-parts":[[2023,10,24]]},"assertion":[{"value":"2023-10-24","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}