DNS is one of the oldest distributed systems still running at global scale, and it was never designed for the security model of the modern internet. The protocol assumes trust by default — which is why DNSSEC exists as a retrofit, and why most zones still do not use it.
Random Memories
DNS