Ghadafi's Libya could have controlled Bitly's TLS key A. Hosting important stuff under TLDs controlled by unstable, unfriendly governments is a dumb idea any w

Ghadafi's Libya could have controlled Bitly's TLS key A. Hosting important stuff under TLDs controlled by unstable, unfriendly governments is a dumb idea any way you slice it. B. Ghadafi's Libya did control bit.ly. Libya still does, until such time as no one will talk to it without properly-authenticated TLS. C. TLS keys are not part of DNSSEC. Some people are proposing that idea, but it's not clear if whatever might get adopted could actually usurp a decently CA signed cert served over HTTPS. It looks far more likely that CA pinning in HSTS is going to be deployed much faster than anything over DNSSEC.