Niobos writes: > Definitely consider the 9.7 series! You can enable auto-dnssec which > will maintain your signatures for you out-of-the-box. It also supports > key rollover, but IIRC doesn't generate new keys at this moment. That's not much of a problem. Thanks for reminding me of 9.7. Martin McCormick