On Thu, Oct 24, 2013 at 10:35:51AM -0400, Predrag Punosevac wrote: > We are looking to move to something little bit more secure with DNSSEC > support out of box.
The "security" you'd get with DNSSEC would be tiny in comparison to problems in reliability. For realistic security, you'd get far more by choosing 1) a registrar without a history of compromises, and 2) a DNS provider that uses something other than BIND. NSD is in base. Nicolai

