3 ms·You get CAs with DNSSEC/DANE, just not PKIX CAs (though you can have those too).by cryptonector 5y agoYou get CAs with DNSSEC/DANE, just not PKIX CAs (though you can have those too).