Hacker News Reader

> defend against malicious DNSSEC

what does that mean?

Not so much a faulty DNSSEC protocol but a misuse of DoH embedded maliciously within applications.

This vector has always existed - all that changed is RFC 8484 defines a standard way of doing this.