Ignore DNSSEC if you like MITM attacks

This article discusses the importance of DNSSEC in preventing man-in-the-middle (MITM) attacks, drawing parallels to the early resistance against HTTPS. The author recounts a 2010 experiment with ARP poisoning that revealed the ease of intercepting unencrypted traffic, then explains how DNSSEC prevents DNS spoofing attacks on email and Matrix communication protocols. It highlights the risks of ignoring DNSSEC, such as attackers redirecting email clients to malicious servers or intercepting MX records, and notes that while MTA-STS offers some protection, it is easily circumvented without DNSSEC. The article is a technical argument for adopting DNSSEC as a security best practice.