DNSSEC doesn't provide anything valuable in terms of privacy. All it does it make it so central governments can more easily censor their controlled tld. If DNSS

DNSSEC doesn't provide anything valuable in terms of privacy. All it does it make it so central governments can more easily censor their controlled tld. If DNSSEC had been rolled out in Libya back in 2010 I doubt the Libyan Revolution would've happened. TLA cert authorities are bad enough. MTA-STS is would make running your own mailsever harder and leash you to one of a dozen cert authorities. If you don't think that's a problem then remember what happened to dot org, and think what will happen to these cert authorities given enough money and time. I've run my own mailserver for a decade now and I am strongly against everything you suggest. But it doesn't matter what I care about. If everyone uses only one of a handful of email providers then they'll just slowly close off their walled gardens anyway. It's already happening no matter how many superfluous cargo-cult standards independent mailserver operators implement.