[tptacek]

DNSSEC is an integrity control, not a privacy control.

[infogulch]

gp proposes a scenario where an integrity breach is lifted to a privacy breach, insisting on a strict distinction doesn't seem useful in this context.

[dcow]

I think it’s a fair aside. One doesn’t just “throw in a little DNSSEC” in a security discussion without extreme care.