Except DNSSEC is just as sketch (and maybe more so) a trust chain. We replace CAs with registrars (OH GOD), TLDs (and for .com, that&#x27;s just CAs again or governments, OH GOD), and ICANN (subject to government seizures!!!).<p>I&#x27;d much sooner support adoption of Marlinspike&#x27;s Convergence or something similarly distributed: <a href="http:&#x2F;&#x2F;convergence.io&#x2F;" rel="nofollow">http:&#x2F;&#x2F;convergence.io&#x2F;</a>