Re: [dns-wg] What about the last mile, was: getting DNSSEC deployed

* Peter Koch wrote:

I'm a bit concerned to see side effects (real or perceived) sold as benefits for DNSSEC, where these benefits don't exist.

Of course, but the side effects are the cool things which make the pig fly. Examples: SSHFP is great for admins. CERT are great for those guys wanting VeriSign to disappear. Agressive negative caches are great for DNS admins. Zone enumerations are great for 'some' people. Larger responses are great for qmail haters. Security buzzwords are great for finanical instituts suffering phishing. Signing the root is great for fundemantalists. DLVs are great for always alternative geeks. Do I miss something?