[CameronNemo]

Fwiw DNSSEC was designed before modern crypto fundamentals were understood. It is a lackluster mechanism, and yet ICANN keeps trying to get people to use it.