When I can self sign and provide the public key by DNSSEC...
then this is fine, assuming we don't ever want anyone who doesn't have a fast connection to be able to cache the data...
then this is fine, assuming we don't ever want anyone who doesn't have a fast connection to be able to cache the data...