The suggestion to use “blockchain” came from user jongjong, not me. I therefore cannot elaborate on it. > DNSSEC, by contrast, is 100% a centralized PKI syste

The suggestion to use “blockchain” came from user jongjong, not me. I therefore cannot elaborate on it. > DNSSEC, by contrast, is 100% a centralized PKI system. Again, my point is that just because something can have, or has, a central point, does not mean it is “centralized”. The DNSSEC root cannot override individual DNS records on the domain or subdomain levels. DNS (and DNSSEC) is federated; i.e. it delegates absolute authority over sections to others, which can in turn delegate authority for domains to yet other, which can in turn delegate authority over subdomains, and so on. To make an analogy again: The US federal government does not possess absolute authority over the states. The UN does not possess absolute authority over its member nations (or other nations). Interpol does not possess absolute authority over every police force in the world. And so on.