DNSSEC has long been incomplete. Whoever had control of DNS essentially could backdoor the entire system [1].
However, now with Handshake [2], DNSSEC has become incredibly useful. TLSA records can be served directly from the blockchain which means provability [3]. This is in contrast to the current CA system wherein any CA can generate a valid certificate.
