Examples of how this fails DNSSEC, the KEY Resource Record (RR) Supposed to hold keys for all purposes Trust model unworkable, performance hit SIKED BoF DNSSEC signatures Has caused tremendous problems in code "Corner cases" repeatedly found, some unsolvable, simply ignoring them |