[hkt]

Fair point. I'd honestly not considered the flaws of DNSSEC and how they play with DANE.

Another day in tech, another deep sigh.