> possible for DNSSEC if people who want to solve the problem

But for several decades, DNSSEC proponents have been complaining about the vocal detractors, rather than actually addressing the problems that have been identified. That's a pretty significant track record on which to make a fair judgment about who is making the strongest case.

Someone above offered a link [1] that gives some pretty good reasons why nobody is stepping up to fix the problems.

[1] https://blog.apnic.net/2024/05/28/calling-time-on-dnssec/