The "KeyTrap" DNS Vulnerability

Much as I would dearly love to keep whacking the protocol over the head over this, we've had a couple recent discussions of it already.

https://news.ycombinator.com/item?id=39372384