Just a heads up that all the Internet’s root DNS servers have now switched over to DNSSEC 100% glitch free so far. Once this propagates down to ISP level support (who knows when this will be, maybe with IPv6…) we can finally verify the authenticity of DNS records hence putting an end to cache poisoning attacks and MITM DNS query interception. Steps in the right direction!