It’s more than two years since I wrote my introduction to DNSSEC and the internet is let to open its loving arms to DNSSEC and DANE.

Don’t just trust my work for it:

• http://sockpuppet.org/blog/2015/01/15/against-dnssec/
• http://sockpuppet.org/stuff/dnssec-qa.html
• https://www.imperialviolet.org/2015/01/17/notdane.html

Thanks to Hannes for originally bringing these articles to my attention