[dns-operations] DNSSEC deployment incentives

[John Levine]

In article <mailman.150.1560889668.1398.dns-operations at lists.dns-oarc.net> you write:
>-=-=-=-=-=-
>-=-=-=-=-=-
>
>On 18 Jun 2019, at 21:21, Bill Woodcock wrote:
>
>>> Why not get some TLSA records going for that server too Bill, if you're
>>> using TLS?

Now we get to ponder which is more broken, DNSSEC (and registrar
account compromises), or the world of CAs.