Reminds me of: https://serverfault.com/questions/1018543/dns-not-resolving-in-all-locations-after-a-week/1107868#1107868 https://serverfault.com/questions/1018

Reminds me of: https://serverfault.com/questions/1018543/dns-not-resolving-in-all-locations-after-a-week/1107868#1107868 https://serverfault.com/questions/1018543/dns-not-resolving-... Unfortunately the basic thought process is that "it is a security feature, therefore it must be enabled" it is very hard to argue against that, but it is pretty similar to "we must have the latest version of everything as that is secure" and "we should add more passwords with more requirements and expire it often". One of those security theatres that optimizes for reducing accountability, but may end up with almost no security gains and huge tradeoffs that may end up even compromising security through secondary effects (how secure is a system that is down?)