Apologies for the inevitable duplicates. You might be interested in reading about our measurements of real obtained DNS transfer sizes in relation to clients requesting DNSSEC responses. See here http://labs.ripe.net/content/measuring-dns-transfer-sizes-first-results Daniel