Domain Name System (DNS)¶

DNS translates names into addresses and does so almost entirely on trust: responses are accepted from whoever answers first, and the resolution hierarchy assumes good faith at every level. From cache poisoning and subdomain takeover to encrypted DNS abuse and resolver manipulation, the attack surface expands in proportion to how much depends on name resolution returning the correct answer.