I've written a bit about DNSSEC. Adoption is only around 1-5%, deployment is a footgun [1], and validation currently imposes significant performance penalties [

I've written a bit about DNSSEC. Adoption is only around 1-5%, deployment is a footgun [1], and validation currently imposes significant performance penalties [2], although that could be improved. I've also written about performance of DNS over TLS [3] and found it to be negligible. The TLS setup is only done infrequently. [1] https://ianix.com/pub/dnssec-outages.html https://ianix.com/pub/dnssec-outages.html [2] https://cyounkins.medium.com/costs-and-benefits-of-local-dnssec-validation-53c72ca9059b https://cyounkins.medium.com/costs-and-benefits-of-local-dns... [3] https://cyounkins.medium.com/performance-of-dns-over-tls-4f4b8f938bc https://cyounkins.medium.com/performance-of-dns-over-tls-4f4...