When Parents and Children Disagree: Diving into DNS Delegation Inconsistency

Raffaele Sommese*, Giovane C.M. Moura, Mattijs Jonker, Roland van Rijswijk-Deij, Alberto Dainotti, K.C. Claffy, Anna Sperotto

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

8 Citations (Scopus)
154 Downloads (Pure)


The Domain Name System (DNS) is a hierarchical, decentralized, and distributed database. A key mechanism that enables the DNS to be hierarchical and distributed is delegation [7] of responsibility from parent to child zones—typically managed by different entities. RFC1034 [12] states that authoritative nameserver (NS) records at both parent and child should be “consistent and remain so”, but we find inconsistencies for over 13M second-level domains. We classify the type of inconsistencies we observe, and the behavior of resolvers in the face of such inconsistencies, using RIPE Atlas to probe our experimental domain configured for different scenarios. Our results underline the risk such inconsistencies pose to the availability of misconfigured domains.
Original languageEnglish
Title of host publicationPassive and Active Measurement
Subtitle of host publication21st International Conference, PAM 2020, Eugene, Oregon, USA, March 30–31, 2020. Proceedings
EditorsAnna Sperotto, Alberto Dainotti, Burkhard Stiller
Place of PublicationCham
Number of pages15
ISBN (Electronic)978-3-030-44081-7
ISBN (Print)978-3-030-44080-0
Publication statusPublished - Mar 2020
Event21st International Conference on Passive and Active Measurement, PAM 2020 - University of Oregon, Eugene, United States
Duration: 30 Mar 202031 Mar 2020
Conference number: 21

Publication series

NameLecture Notes in Computer Science
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349


Conference21st International Conference on Passive and Active Measurement, PAM 2020
Abbreviated titlePAM
Country/TerritoryUnited States


  • Cybersecurity


Dive into the research topics of 'When Parents and Children Disagree: Diving into DNS Delegation Inconsistency'. Together they form a unique fingerprint.

Cite this