That doesn't explain why networks aggressively caching a fake DNS is a problem for their website without SSL redirects.