Comment by j16sdiz

1. DNS is insecure.... DNSSEC, despite all the effort goes it, still does not work in most TLD and registers.

2. Cache. People are caching DNS aggressively. Often more aggressive than what the TTL allows.

You don't want to save the fingerprint in a stale, insecure database like that.