Great, then my entire TLS setup is useless, and I can just use plaintext HTTP. The whole point is that at least CAs enforce DNSSEC, so no one can get a certifi

Great, then my entire TLS setup is useless, and I can just use plaintext HTTP. The whole point is that at least CAs enforce DNSSEC, so no one can get a certificate for my site except for me.