It's a protection racket born of fundamental weaknesses in the Internet's bedrock protocols.