> The CA mechanism used for TLS has the same issue. It's not just theoretical either... Exactly. Which is why so many of us are looking for ways to add an add

> The CA mechanism used for TLS has the same issue. It's not just theoretical either... Exactly. Which is why so many of us are looking for ways to add an additional layer of trust to the CA system used for TLS. One such mechanism is to use DANE and DNSSEC as an additional mechanism for trust.