Yes, I was referring to the fact that DNS responses are trivial to spoof. HTTP isn't much better, either, but at least an HTTP website can be turned into an HT

Yes, I was referring to the fact that DNS responses are trivial to spoof. HTTP isn't much better, either, but at least an HTTP website can be turned into an HTTPS website without too much hassle. DNS on the other hand looks as if it will be stuck in its current form for many years to come. With HTTP(S), you can choose to be secure. With DNS, you're insecure and you have no choice.