I'm not sure how CT for DNSSEC would happen. If we had a spec and implementations then we could get market pressure applied. Mozilla and Chrome might have sec

I'm not sure how CT for DNSSEC would happen. If we had a spec and implementations then we could get market pressure applied. Mozilla and Chrome might have security indicators on their browser that incentivize the use of TLDs that provide better security. And again, I think DNSSEC already has things that WebPKI doesn't have that give it some advantages in terms of security. CT is not a panacea either, since it requires that people pay attention to what CAs issue certificates for.