[spec] Certificate trust

[Stephane Bortzmeyer]

On Mon, Mar 01, 2021 at 01:48:02AM +0000,
 colecmac at protonmail.com <colecmac at protonmail.com> wrote 
 a message of 13 lines which said:

> Unless your computer is using DoH or DoT (or DNSSEC?? Not sure) then
> your DNS lookup isn't secure either.

I fail to see the relationship with DoT and DoH. If you care about
integrity and authenticity of DNS answers, DNSSEC is the
solution. (This is why DANE requires it.)