On 4/22/25 8:32 PM, Paul Wouters wrote: > All the CAbal exists only because of browsers refusing to do DNSSEC, > even now they have a clean and secure path via DoH anyways.... What are the downsides to DNSSEC? Both honest and real, and imagined or excuses. -kb