Comment by isityettime

> plenty of middleboxes freak out when they see DNS packets with DNSSEC records in them. People see this and want a best-effort system that uses DNSSEC in the majority cases where it does work

Who? Companies whose audiences are certain kinds of corporations?