Well , yes . A DNSSEC and DANE or DNSSEC and static DNS verification approach would be preferred , yes . Then they ' ll just ask LE to issue them a certificate and get one , without you even knowing . Game over . The same can be done today already with DNS auth by a state actor . Just intercept the communication between LE and the DNS server , and you get full control . <| sep |> She didn ' t skip neck day . <| sep |> see . when i say dropkick i mean you hold the ball in your hand and then kick it before it goes to the ground after you drop the ball from your hand . in soccer OTOH you only kick the ball without ' dropping ' the ball <| sep |> Can I have more questions ? <| sep |> Then that ' s really the only option for that monitor unlbe expects to only use headphones .