Lots of things would help protect against this, but this regulation purports to prevent the browser vendor from implementing any stronger security mechanisms th

Lots of things would help protect against this, but this regulation purports to prevent the browser vendor from implementing any stronger security mechanisms than those specified by the regulation. If DANE prevented a certificate from one of these governmental CAs from being accepted, this regulation would try to prevent using DANE.