If you are using your own DNS cache listening on a loopback interface, then the risks of &quot;DNS cache poisoning&quot; are not what they are when you use a third party cache like your ISP&#x27;s, OpenDNS, Google or the ones in the CSV file at the github page referenced in this blog entry.<p>Unless you are sharing your loopback with the network somehow, one could argue that with a localhost cache the risk is nonexistent.<p>According to this blog entry the reason for using DNSSEC is to &quot;prevent DNS posioning&quot;.<p>If that is true, and that is what I would expect, and we&#x27;ve minimized the risk of cache poisoning by using a localhost cache exlcusively (no third party caches), then why use DNSSEC?<p>If there are other reasons, like making centralized control (censorship?) of DNS easier for ICANN, etc., then this blog post has omitted them.  Does that imply they are insignificant?