On Sep 12, 2013, at 1:21 PM, Theodore Ts'o <tytso@xxxxxxx> wrote: > Still, I agree with the general precept that perfect should not enemy > of the better, and DNSSEC certainly adds value. I just get worried > about people who seem to think that DNSSEC is a panacea. Me too. It most certainly is not.