My point that I was trying to make is that DNSSEC being focused on authenticating the existing DNS record data, and not on the control and protocol plane, leave

My point that I was trying to make is that DNSSEC being focused on authenticating the existing DNS record data, and not on the control and protocol plane, leaves it out inside of control issues. Sure it enshrines the existing roots and the ultimate authorities for the correctness of DNS, but this is already true, and going against it means a fork of DNS in a sense which doesn’t seem like anyone really wants.