The Seven People Who Can Turn Off the Internet

Summary by Krater

This video explains how the Domain Name System (DNS) works, why it needs security via DNSSEC, and how ICANN manages global internet security through root servers and hardware security modules.

From the video

Answers: How does the Domain Name System work and how is it secured?

• Domain Name System (DNS)
• IP addresses
• DNSSEC
• Asymmetric encryption
• Digital signatures
• Hardware Security Modules (HSMs)
• ICANN trust anchor
• Root servers

What it concludes

• DNS translates human-readable domain names into IP addresses through a recursive process involving root servers and domain servers.
• DNSSEC uses asymmetric encryption and digital signatures to authenticate DNS records and prevent spoofing.
• ICANN secures the entire DNS system using a trust anchor backed by seven key holders worldwide.
• The physical private keys securing the root DNS are stored in Hardware Security Modules kept in Culpeper, Virginia and El Segundo, California.