> Evan can confirm or deny this, but I think EDNS0 support is blocking him > (or will be Real Soon Now), so that might make sense. I'm proceeding with DNSSEC work without it. (Jinmei made the excellent suggestion that for testing purposes, I could simply pretend that all queries had sent the DO bit.) eh