On Fri, 11 Apr 2014, Bruno Wolff III wrote:
> Second, I still don't understand the point. Are you
suggesting it is
> better to believe all DNS lies than to not know where the lies lead?
Not better. That DNSSEC doesn't really solve everythin one might want it to.
And hence one might want to avoid ISPs' DNS services in some cases.
Which is why we do captive portal detection, but would like to see
better NM integration for it.....