> So is almost every other standard, but until something better comes along, DNSSEC is what we have.

I must have missed the last 40 years of the internet where DNS without DNSSEC has worked (and continues to work) just fine.