2 ms·

You're right that something should be used, but DNSSEC is a weak solution from a security point of view.