Just to say we should not expect to much from DNSSEC because DNSSEC is centralized: https://gnunet.org/uva2013 -- http://mr.flossdaily.org