DNSSEC NTAs: No Good Compromises | Hacker News Reader