RT @securityhobo: My deployment of DNSSEC for BIND involves a pair of zip strips and a restraining order against @dakami