Is DNSSEC causing more problems than it solves? • The Register
▻http://www.theregister.co.uk/2016/02/23/dnssec_more_problem_than_solution
The complex security protocol for the domain name system – DNSSEC – has another black mark against it: it is being used as a way to carry out denial-of-service (DDoS) attacks.
That’s according to a security bulletin [PDF] by Akamai that notes it has “observed and successfully mitigated a large number of DNS reflection and amplification DDoS attacks abusing a Domain Name System Security Extension (DNSSEC) configured domain.”