Hacker News new | ask | show | jobs
by silotis 565 days ago
With DNSSEC + DANE Brazil would not have needed to make any deal with MS to be able to issue certs for .br domains and they would not have been able to issue a cert for google.com.

Admittedly DNSSEC has issues to put it mildly, but it does serve as a counterexample to your claim.