dns is a dumpster fire, who thought it was a good idea to put mission critical infrastructure on a protocol that's still vulnerable to cache poisoning and amplification attacks