3 ms·

Yea, DNSSEC has its own problems. Personally I think a version of HSTS for mail is the best idea for now.