{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,21]],"date-time":"2025-11-21T15:53:42Z","timestamp":1763740422460,"version":"3.45.0"},"publisher-location":"New York, NY, USA","reference-count":41,"publisher":"ACM","funder":[{"name":"NSF (National Science Foundation)","award":["CNS- 2339378"],"award-info":[{"award-number":["CNS- 2339378"]}]},{"name":"Comcast Innovation Fund","award":[""],"award-info":[{"award-number":[""]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,28]]},"DOI":"10.1145\/3730567.3764428","type":"proceedings-article","created":{"date-parts":[[2025,11,21]],"date-time":"2025-11-21T15:22:38Z","timestamp":1763738558000},"page":"242-257","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Decoding DNSSEC Errors at Scale: An Automated DNSSEC Error Resolution Framework using Insights from DNSViz Logs"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8282-6225","authenticated-orcid":false,"given":"Md. Ishtiaq","family":"Ashiq","sequence":"first","affiliation":[{"name":"Virginia Tech, Blacksburg, Virginia, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-4647-1579","authenticated-orcid":false,"given":"Olivier","family":"Hureau","sequence":"additional","affiliation":[{"name":"Univ. Grenoble Alpes, CNRS, Grenoble INP, LIG, Grenoble, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0938-375X","authenticated-orcid":false,"given":"Casey","family":"Deccio","sequence":"additional","affiliation":[{"name":"Brigham Young University, Provo, Utah, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4323-4080","authenticated-orcid":false,"given":"Tijay","family":"Chung","sequence":"additional","affiliation":[{"name":"Virginia Tech, Blacksburg, Virginia, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,11,21]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"DNSSEC SCOREBOARD. https:\/\/www.verisign.com\/en_US\/company-information\/verisign-labs\/internet-security-tools\/dnssec-scoreboard\/index.xhtml."},{"key":"e_1_3_2_1_2_1","unstructured":"Internet Society. https:\/\/www.internetsociety.org\/."},{"key":"e_1_3_2_1_3_1","unstructured":"KnotDNS. https:\/\/www.knot-dns.cz\/."},{"key":"e_1_3_2_1_4_1","unstructured":"NSD. https:\/\/www.nlnetlabs.nl\/projects\/nsd\/about\/."},{"key":"e_1_3_2_1_5_1","unstructured":"Shell-AI: let AI write your shell commands. https:\/\/github.com\/ricklamers\/shell-ai."},{"key":"e_1_3_2_1_6_1","volume-title":"IETF","author":"Arends R.","year":"2005","unstructured":"R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. DNS Security Introduction and Requirements. RFC 4033, IETF, 2005. http:\/\/www.ietf.org\/rfc\/rfc4033.txt."},{"key":"e_1_3_2_1_7_1","volume-title":"IETF","author":"Arends R.","year":"2005","unstructured":"R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. Protocol Modifications for the DNS Security Extensions. RFC 4035, IETF, 2005. http:\/\/www.ietf.org\/rfc\/rfc4035.txt."},{"key":"e_1_3_2_1_8_1","volume-title":"IETF","author":"Arends R.","year":"2005","unstructured":"R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. Resource Records for the DNS Security Extensions. RFC 4034, IETF, 2005. http:\/\/www.ietf.org\/rfc\/rfc4034.txt."},{"key":"e_1_3_2_1_9_1","volume-title":"Calling time on DNSSEC: The costs exceed the benefits","author":"Brown M.","year":"2023","unstructured":"M. Brown. Calling time on DNSSEC: The costs exceed the benefits. 2023. https:\/\/www.mattb.nz\/w\/2023\/06\/02\/calling-time-on-dnssec\/."},{"key":"e_1_3_2_1_10_1","volume-title":"End-to-End View of the DNSSEC Ecosystem. USENIX Security","author":"Chung T.","year":"2017","unstructured":"T. Chung, R. van Rijswijk-Deij, B. Chandrasekaran, D. Choffnes, D. Levin, B. M. Maggs, A. Mislove, and C. Wilson. A Longitudinal, End-to-End View of the DNSSEC Ecosystem. USENIX Security, 2017."},{"key":"e_1_3_2_1_11_1","volume-title":"IMC","author":"Chung T.","year":"2017","unstructured":"T. Chung, R. van Rijswijk-Deij, D. Choffnes, A. Mislove, C. Wilson, D. Levin, and B. M. Maggs. Understanding the Role of Registrars in DNSSEC Deployment. IMC, 2017."},{"key":"e_1_3_2_1_12_1","unstructured":"Cloudflare. http:\/\/www.cloudflare.com."},{"key":"e_1_3_2_1_13_1","volume-title":"Quantifying and Improving DNSSEC Availability. 2011 Proceedings of 20th International Conference on Computer Communications and Networks (ICCCN)","author":"Deccio C.","year":"2011","unstructured":"C. Deccio, J. Sedayao, K. Kant, and P. Mohapatra. Quantifying and Improving DNSSEC Availability. 2011 Proceedings of 20th International Conference on Computer Communications and Networks (ICCCN), 2011."},{"key":"e_1_3_2_1_14_1","volume-title":"IMC","author":"Daniluk C. A.","year":"2024","unstructured":"C. A. Daniluk, Y. Nosyk, A. Duda, and M. Korczynski. Zeros Are Heroes: NSEC3 Parameter Settings in the Wild. IMC, 2024."},{"key":"e_1_3_2_1_15_1","unstructured":"DNSSEC Debugger. http:\/\/dnssec-debugger.verisignlabs.com."},{"key":"e_1_3_2_1_16_1","unstructured":"DNSSEC Deployment Report. https:\/\/rick.eng.br\/dnssecstat\/."},{"key":"e_1_3_2_1_17_1","unstructured":"DNSSEC Statistics. https:\/\/www.internetsociety.org\/deploy360\/dnssec\/statistics\/."},{"key":"e_1_3_2_1_18_1","unstructured":"DNSSEC chain validation issue: technical incident report. https:\/\/internetnz.nz\/news-and-articles\/dnssec-chain-validation-issue-technical-incident-report\/."},{"key":"e_1_3_2_1_19_1","unstructured":"DNSSEC issues take Fiji domains offline. https:\/\/blog.cloudflare.com\/dnssec-issues-fiji\/."},{"key":"e_1_3_2_1_20_1","unstructured":"DNSViz. http:\/\/dnsviz.net."},{"key":"e_1_3_2_1_21_1","unstructured":"A. Eden. Announcing CDS\/CDNSKEY Support. 2019. https:\/\/blog.dnsimple.com\/2019\/02\/cds_cdnskey\/."},{"key":"e_1_3_2_1_22_1","volume-title":"IETF","author":"Eastlake D.","year":"1999","unstructured":"D. Eastlake. Domain Name System Security Extensions. IETF RFC 2535, IETF, 1999."},{"key":"e_1_3_2_1_23_1","volume-title":"Measuring the use of DNSSEC","author":"Huston G.","year":"2023","unstructured":"G. Huston. Measuring the use of DNSSEC. 2023. https:\/\/blog.apnic.net\/2023\/09\/18\/measuring-the-use-of-dnssec\/."},{"key":"e_1_3_2_1_24_1","unstructured":"G. Huston. Calling time on DNSSEC? 2024. https:\/\/blog.apnic.net\/2024\/05\/28\/calling-time-on-dnssec\/."},{"key":"e_1_3_2_1_25_1","first-page":"9276","article-title":"Guidance for NSEC3 Parameter Settings","volume":"9276","author":"Hardaker W.","year":"2022","unstructured":"W. Hardaker and V. Dukhovni. Guidance for NSEC3 Parameter Settings. RFC 9276, 9276, RFC Editor, 2022.","journal-title":"RFC"},{"key":"e_1_3_2_1_26_1","volume-title":"RFC Editor","author":"Kumari W.","year":"2020","unstructured":"W. Kumari, E. Hunt, R. Arends, W. Hardaker, and D. C. Lawrence. Extended DNS Errors. RFC 8914, RFC Editor, 2020."},{"key":"e_1_3_2_1_27_1","unstructured":"Key Management DNSSEC Guide : Chapter 6. Advanced Discussions. https:\/\/dnsinstitute.com\/documentation\/dnssec-guide\/ch06s04.html."},{"key":"e_1_3_2_1_28_1","volume-title":"IETF","author":"Laurie B.","year":"2008","unstructured":"B. Laurie, G. Sisson, R. Arends, and D. Blacka. DNS Security (DNSSEC) Hashed Authenticated Denial of Existence. RFC 5155, IETF, 2008."},{"key":"e_1_3_2_1_29_1","unstructured":"E. Lewis. Where did DNSSEC go wrong? https:\/\/blog.apnic.net\/2024\/07\/05\/where-did-dnssec-go-wrong\/."},{"key":"e_1_3_2_1_30_1","volume-title":"USENIX Security","author":"Lee H.","year":"2022","unstructured":"H. Lee, M. I. Ashiq, M. Muller, R. van Rijswijk-Deij, T. Kwon, and T. Chung. Under the Hood of DANE Mismanagement in SMTP. USENIX Security, 2022."},{"key":"e_1_3_2_1_31_1","volume-title":"IMC","author":"M\u00fcller M.","year":"2019","unstructured":"M. M\u00fcller, M. Thomas, D. Wessels, W. Hardaker, T. Chung, W. Toorop, and R. van Rijswijk-Deij. Roll, Roll, Roll your Root: A Comprehensive Analysis of the First Ever DNSSEC Root KSK Rollover. IMC, 2019."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423638"},{"key":"e_1_3_2_1_33_1","volume-title":"IMC","author":"Nosyk Y.","year":"2023","unstructured":"Y. Nosyk, M. Korczy?ski, and A. Duda. Extended DNS Errors: Unlocking the Full Potential of DNS Troubleshooting. IMC, 2023."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23386"},{"key":"e_1_3_2_1_35_1","volume-title":"IMC","author":"Roth S.","year":"2019","unstructured":"S. Roth, R. van Rijswijk-Deij, and T. Chung. Tracking Registrar Support for DNSSEC: It's Slowly Getting Better. IMC, 2019."},{"key":"e_1_3_2_1_36_1","unstructured":"The Case of the Recursive Resolvers: What Happened During Slack's DNSSEC Rollout. https:\/\/slack.engineering\/what-happened-during-slacks-dnssec-rollout\/."},{"key":"e_1_3_2_1_37_1","unstructured":"The DNS Operations Analysis and Research Center (DNS-OARC). https:\/\/www.dns-oarc.net\/oarc\/programme."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC8624"},{"key":"e_1_3_2_1_39_1","volume-title":"IETF","author":"Weiler S.","year":"2013","unstructured":"S. Weiler and D. Blacka. Clarifications and Implementation Notes for DNS Security (DNSSEC). RFC 6840, IETF Request for Comments 6840, IETF, Feb. 2013."},{"key":"e_1_3_2_1_40_1","unstructured":"Zonemaster. https:\/\/zonemaster.net\/en\/run-test."},{"key":"e_1_3_2_1_41_1","unstructured":"zone2sql and load-zone are not suitable for presigned zones; set-presigned is a useless button. https:\/\/github.com\/PowerDNS\/pdns\/issues\/8892."}],"event":{"name":"IMC '25:ACM Internet Measurement Conference","location":"Madison WI USA","sponsor":["SIGMETRICS ACM Special Interest Group on Measurement and Evaluation","SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the 2025 ACM Internet Measurement Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3730567.3764428","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,21]],"date-time":"2025-11-21T15:26:27Z","timestamp":1763738787000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3730567.3764428"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,28]]},"references-count":41,"alternative-id":["10.1145\/3730567.3764428","10.1145\/3730567"],"URL":"https:\/\/doi.org\/10.1145\/3730567.3764428","relation":{},"subject":[],"published":{"date-parts":[[2025,10,28]]},"assertion":[{"value":"2025-11-21","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}