Post #2169202

@vincent That's correct, but evidently getting DNSSEC key rollovers right is hard, i.e., deploying it increases the risk that you'll mess something up. They need to do all the existing DNS serving stuff anyway, doing DNSSEC correctly *in addition* is a net increase in risk of getting it wrong.