No browser uses DNSSEC.
That was in reference to the former, i.e. in-browser DoH/DoT lookups.
Re:We updated our RSA SSH host key
by nibbleshifter on Saturday March 25, 2023 @10:43AM
(#35303107)
Thank god. Someone needs to take that protocol out back and give it the old yeller treatment.
I'd guess that most systems aren't using DoH/DoT or end-to-end DNSSEC yet. Some browsers do, but that doesn't help tooling frequently used on the command line.