> I believe that DNSSEC makes this eminently doable. i do not believe that dnssec has made anything eminently doable. it is a real mess which we are struggling to learn how to deploy. read the dns-ops lists. i would not put anything on that horse's back until it has been shown to be stable and reliable. randy