the mechanism is there, people are not choosing to use it. That is because security is hard. This doesn't mitigate MitM attacks, as upstream DNS records can s

the mechanism is there, people are not choosing to use it. That is because security is hard. This doesn't mitigate MitM attacks, as upstream DNS records can still be spoofed WE go from a fast, decentralised, resilient and low overhead system, to a centralised chatty and fragile behemoth. It still doesn't give end to end encryption, its just a slow encrypted proxy.