Why were we so vulnerable to the DNS vulnerability?

Dan Kaminsky

SSL wasn't enough. Encryption is nonexistent. Autoupdaters are horribly broken. Why is all this the case?