Some (e.g. https://sockpuppet.org/blog/2015/01/15/against-dnssec) concluded that DNSSEC/DANE's real role would be the replacement of the TLS CA system, granting DNS-controlling entities (i.e. governments) the same cryptographic authority as CAs. Let me initiate a discussion about something that may sound absolutely ridiculous: what if Let's Encrypt was founded for the exact same long-run purpose?
The Internet Security Research Group maintaining Let's Encrypt seems quite independent. But Let's Encrypt is free. It already has 0.1% market share (https://w3techs.com/technologies/overview/ssl_certificate/all) despite being on the market for only 5 years. Isn't this simply too good to be true & trusted?