Reply to post:

"DNSSEC" - in the scheme of these attacks (entire bank networks and server farms penetrated), this subject is a small issue in the big picture.

Plus TLS should take care of that if the TLS system and its CAs have not again been pwned,