DNSSEC isn’t dead; the graph of its deployment is what you’d want for any emerging technology: high and to the right [1]. The problem is DNSSEC is complicated

DNSSEC isn’t dead; the graph of its deployment is what you’d want for any emerging technology: high and to the right [1]. The problem is DNSSEC is complicated to deploy for large organizations like Microsoft with hundreds of domains (and subdomains). Meanwhile, many domain registrars make it close to trivial to deploy DNSSEC for small and medium sized companies. [1]: https://stats.dnssec-tools.org/#/?top=dane&trend_tab=0 https://stats.dnssec-tools.org/#/?top=dane&trend_tab=0