On Tue, 25 Mar 2014 20:41:53 -0700, Dave Taht said:

> I'm still at a loss as to the most correct way to bring up dnssec.

Don't sweat it too much - nobody else in the security business knows
how to do it either. :)  DNSSEC has even less uptake than IPv6....