Top-down DNSSEC validation
6

Current security status always known

Source of error known immediately

Only authoritative servers used