The article examines DNS fundamentals, compares DNSSEC and HTTPDNS, outlines their workflows, advantages, and drawbacks, and details a custom IP‑scoring mechanism using Cronet to improve reliability and security for mobile network requests.
This article explains how everyday network protocols such as DNS, HTTP, and IP routing expose your traffic to eavesdropping, hijacking, and spoofing, and it reviews practical mitigations like DNSSEC, DoH, ODoH, TLS 1.3, HSTS, and user‑focused security hygiene.
After users in Singapore reported inability to resolve the internal domain goofy.app, a systematic investigation revealed that DNSSEC misconfiguration—specifically an incorrect DS record—caused DNS resolution failures globally, while Chinese DNS servers succeeded due to disabled DNSSEC validation, and removing the faulty key resolved the issue.
An internal investigation revealed that the goofy.app domain could not be resolved from Singapore offices because a misconfigured DNSSEC DS record caused validation failures, while Chinese DNS resolvers ignored DNSSEC, leading to successful resolution there; removing the erroneous DS key restored global accessibility.
Alibaba Cloud DNS senior engineer Guo Chuan, the sole Chinese participant selected for the ICANN64 Talent Program, delivered a keynote on DNS practice, highlighted stability and security challenges, discussed DoH/DoT, DNSSEC, IoT impacts, and emphasized collaborative governance for a resilient global internet infrastructure.
