Sure for google.com it’ll fail. But you could do it for many, many others. The reality is that control of a zone is all it really takes for someone to get a c

Sure for google.com it’ll fail. But you could do it for many, many others. The reality is that control of a zone is all it really takes for someone to get a cert issued for it. In that context you are most certainly dependent on the accuracy of the DNS. I didn’t for one minute suggest DNSSEC would help in relation to the attack detailed in the article. I am just saying that to claim securing the DNS is pointless is, in my opinion, a fallacy.