The allure over other DV CAs is that it&#x27;s gratis, and, soon, that it&#x27;ll be deployable at the push of a button.<p>DANE-TA or DANE-EE still would have been better than any and all of this DV public CA nonsense. A DV cert from a public CA proves that someone on the other end of the connection momentarily controlled either the DNS records for your domain, or your web server, <i>at some point</i> in the near past. That&#x27;s it.<p>DV is an extremely weak proof of identity, and provides no authentication at all (as in, proof that the issue was actually authorised by the domain <i>owner</i>).