DNSSEC does nothing to prevent information leakage, the opposite in fact. People compare it to SSL but it's not like SSL. It does NO encryption of the commuic

DNSSEC does nothing to prevent information leakage, the opposite in fact. People compare it to SSL but it's not like SSL. It does NO encryption of the commuications. It's only validation (argubaly the most broken part of SSL). A better ananlog to SSL would be DNSCrypt, which we've been using now for years, is slowly gaining traction and adoption by others, and provides real privacy from DNS messages from being intercepted or manipulated.