I used to think that DNSSEC was a good thing. Authenticated DNS lookup, what's not to like? Incidents like this make me question that. But dropping DNSSEC leav

I used to think that DNSSEC was a good thing. Authenticated DNS lookup, what's not to like? Incidents like this make me question that. But dropping DNSSEC leaves the problem of securing DNS unhandled. What would you propose in its place to address securing DNS?