Eric Rescorla's DNS Security, Part II: DNSSEC ( via ) is a pretty even handed overview of DNSSEC. Rescorla is respected by Thomas Ptacek , even if they disagree (I think) about DNSSEC.

(Rescorla also has a Part I: Basic DNS for people who need that.)

Related to this is Ptacek's fascinating A Brief, Inaccurate History of DNSSEC ( via ). This goes with Ptacek's Against DNSSEC (from 2015; this debate has been going on for a while).