Securing the Root: What is DNSSEC, what’s the controversy? by Brenden Kuerbis
[IG Editor’s note: [This] is an overview of DNSSEC written for a non-technical audience, however, it assumes some basic knowledge of the Domain Name System (DNS) and public-key cryptography concepts. The point is to provide enough detail to allow us to understand how chosen technology and institutional design creates Internet governance dilemmas. If there is technical blunder, my apologies – by all means let me know. Clear concepts are a baseline for productive debate. And as I said previously, see the actual specifications (RFC 4033, 4034, 4035) or other reference material, e.g., Geoff Huston’s article series or Ron Aithchison’s work for more detailed technical explanations.]
http://blog.internetgovernance.org/blog/_archives/2007/4/9/2866546.html