Comment by account42

CT is a red herring. There is no reason something like that couldn't be used for DANE as well if you wanted and Web PKI didn't have any CT either until recently. It's a non-argument - at best it betrays that this is all about giving root stores the power to unilaterally demand compliance with the policies they want.