News for hackers. Stuff that matters.
Re:ICANN urges adopting DNSSEC now by phicoh on Saturday April 20, 2019 @02:22PM (#19708037)
DNS hijacks at routing level are not common. But they do happen: https://www.theregister.co.uk/2018/04/24/myetherwallet_dns_h...

DNSSEC fully supports DNSSEC validation on the host. So the main reason you have to trust your ISP's recursive resolvers is that software vendors, in particular browser vendors, don't want to do DNSSEC validation.

Of course you can run your own local validating resolver.

Re:ICANN urges adopting DNSSEC now by tptacek on Sunday April 21, 2019 @10:59AM (#19712345)
An attacker that controls routing can bypass the DNS entirely, so it's hard to see how protecting the DNS from that attacker serves any meaningful purpose.