>>>>> "Dave" == Dave CROCKER <dhc2@xxxxxxxxxxxx> writes: Dave> Or am I misunderstand the disparity between current reality Dave> and necessary enhancements? You are. It's all ready. DNSSEC can be done in the plenary by changing the recursive servers. It's pretty close to being completely apt-get/yum/pkg_add able as being on. What's missing is someone to decide what are the set of TAs to use... Go read: http://www.dnssec-deployment.org/ -- ] ON HUMILITY: to err is human. To moo, bovine. | firewalls [ ] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[ ] mcr@xxxxxxxxxxxxxxxxxxxxxx http://www.sandelman.ottawa.on.ca/ |device driver[ ] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [ _______________________________________________ Ietf@xxxxxxxx https://www.ietf.org/mailman/listinfo/ietf