Hi, i have performed a little research on the effects of deploying DNSSEC, which might be interesting to the people of this wg. you can find it at http://www.nlnetlabs.nl/downloads/dnssec-effects.pdf ------------------------------------------------------------------ Abstract Ripe NCC recently started signing the zones on their DNS servers. This document presents a few measurements of the effects (if any) on the behaviour of the resolvers sending queries to the Ripe nameservers. We have looked at the rate of queries with the DO bit (’use DNSSEC’) set to 1, compared to those with the DO bit set to 0. We have also looked at the number of DNS responses that were truncated. ------------------------------------------------------------------- Jelte Jansen NLnet Labs