I used to work in DNS security. DNSSEC is a really bad idea. It blocked us from doing really innovative work that would have protected people.<p>Lots of really smart folks like tptacek and djb oppose it too. But even we can&#x27;t stand in the way of millions in NSF dollars and a mission statement.