Sorry, I have a problem with the deployment of entire new Internet cryptosystems that grant NSA huge privileges by design. A decade of crypto engineering may have instilled an irrational bias against broken, compromised cryptosystems. To me: crypto should be something that makes NSA's job harder, not easier.

We may be at an impasse.

NSA certainly is a resourceful adversary. But may I point out what Thomas wrote in his FAQ about this?

”If over the next 5 years nothing more is done to shore up Internet security than is already being done, targeted CA-based attacks will become much riskier for NSA and GCHQ because of key pinning. To man-in-the-middle an HTTPS connection, NSA will need to know that the browser they’re targeting hasn’t already cached the correct key fingerprint for the server. If it has, the browser will scream bloody murder and, hopefully, report back to Google or the EFF about the discrepancy. People watching those logs will quickly discover which CAs are signing bogus certificates, and compromised CAs will be evicted from browsers. NSA and GCHQ will have to risk burning an entire CA every time they launch this attack. If we do nothing new at a protocol level, every Chrome and Firefox installation on the Internet will become part of a global anti-surveillance surveillance system.”

http://sockpuppet.org/stuff/dnssec-qa.html