I think it&#x27;s important that those of you who haven&#x27;t read up on DNSSEC understand how bad an idea it is:<p><a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=10539418" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=10539418</a><p>If DNSSEC had been deployed a few years back, Muammar Gadaffi could conceivably controlled BIT.LY&#x27;s TLS keys. Yesterday, today, and tomorrow, DNSSEC gives the NSA immense control over the TLS keys of sites in .COM, .ORG, .NET, .CO.UK, .IO, .COM.AU, and many more.