Some clients don&#x27;t validate. Some do. Everything on my home network is protected because my router&#x27;s instance of dnsmasq validates. When I&#x27;m away from home, there&#x27;s dnssec-trigger and a Firefox extension.<p>I really don&#x27;t understand why the existence of software that doesn&#x27;t try to take advantage of DNSSEC is being used as evidence that DNSSEC is incapable of doing something.