3 ms·It's no better unless the domain and all such CAs are using DNSSEC.by cxseven 12y agoIt's no better unless the domain and all such CAs are using DNSSEC.