[tptacek]

Because DNSSEC is silly and doesn't solve any real problems, but does introduce a major operational burden where screwups have immense costs.