dnssec is a joke, nobody actually uses it because who needs security when you can just hope nobody notices your dns is being manipulated.