Comment by chimeracoder

His argument is that DNSSEC is fundamentally broken, and you can't fix it via incremental improvements.

He is not arguing that DNS security cannot or should not be improved; in fact, he explicitly states the exact opposite.