> While this is true, what DNSSec solves is the distribution of trusted identity. Attempts to solve. I don't trust identities just because the US government te

> While this is true, what DNSSec solves is the distribution of trusted identity. Attempts to solve. I don't trust identities just because the US government tells me to do so. I believe certificate transparency + ubiquitous TLS + RFC 7858 (or DNSCurve/DNSCrypt) is a better cocktail.