Yet another reason to deploy DNSSEC :)