What Actually Happens When You Resolve a Domain Name

A deep dive into DNS recursive resolution: priming queries, iterative descent, QNAME minimization, EDNS(0), the Kaminsky attack, source port randomization, and DNSSEC chain of trust.