@teamcymru The path forward for DNS must include encryption. Hold-on timers are neat, and DNSSEC has value, but encryption is required. SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique