> The last point is do we want the whole thing or to make the DNSSEC > part optional (as in BIND 9 but IMHO justification is historic only)? IMHO it should *not* be optional. eh