One of the downsides of allowing legislation like this that imposes compliance requirements on organizations is that it creates widespread law-breaking by the o

One of the downsides of allowing legislation like this that imposes compliance requirements on organizations is that it creates widespread law-breaking by the otherwise law-abiding. It can also inadvertently stifle key technical standards. Would you be willing to switch on DNSSEC validation in client side software (browsers, operating systems) if it only talks to nameservers that are compliant with government censorship? Yes, this is a stupid law, but it's technical implementation is possible because there is a single root for public DNS.