Huston: Calling Time on DNSSEC?

Geoff Huston suggeststhat it is time to give up on DNSSEC and look for a better way to securethe Internet namespace.

What appears to be very clear (to me at any rate!) is that DNSSECas we know it today is just not going anywhere. It's too complex,too fragile and just too slow to use for the majority of servicesand their users. Some value its benefits highly enough that theyare prepared to live with its shortcomings, but that's not the casefor the overall majority of name holders and for the majority ofusers, and no amount of passionate exhortations about DNSSEC willchange this.