Github.com receives a slightly better score [1]. I'm surprised we still consider DNSSEC to be a measurable factor in a sites security ranking. How long until

Github.com receives a slightly better score [1]. I'm surprised we still consider DNSSEC to be a measurable factor in a sites security ranking. How long until that test is removed? We don't test for HPKP Public Key Pinning any more as adoption halted and many people removed it due to complexity traps that could cause outages. DNSSEC has been experiencing the same problems [2] making businesses hesitant to use it [3]. Ycombinator still gets an "A" for security headers [4]. At times HN gets pointed to AWS's CDN so that is perhaps a way to address the IPv6 short term until IPv6 addresses were added to HN's servers. I can envision fintech eventually being regulated into adopting DNSSEC. For everyone else it would probably require better tooling and fail-safes. [1] - https://internet.nl/site/github.com/2231928/ https://internet.nl/site/github.com/2231928/ [2] - https://ianix.com/pub/dnssec-outages.html https://ianix.com/pub/dnssec-outages.html [3] - https://blog.apnic.net/2021/11/26/adoption-of-dns-security-mechanisms-related-to-ease-of-use-cost/ https://blog.apnic.net/2021/11/26/adoption-of-dns-security-m... [4] - https://securityheaders.com/?q=https%3A%2F%2Fnews.ycombinator.com%2F&hide=on&followRedirects=on https://securityheaders.com/?q=https%3A%2F%2Fnews.ycombinato...