Comment by ahf

Yeah, that's true; DANE does not add anything to the encryption of the protocol itself.

The point of this is to, hopefully, slowly get people to start actually verifying certificates instead of just randomly assuming that they are secure.