[hannob]

The point is: Even though WebPKI isn't perfect, it's still for all practical purposes a whole lot better than DNSSEC.