Mich:~ michuki$ dig @l.root-servers.net ke +dnssec ; <<>> DiG 9.4.3-P3 <<>> @l.root-servers.net ke +dnssec ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28440 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 5, ADDITIONAL: 6 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;ke. IN A ;; AUTHORITY SECTION: ke. 172800 IN NS ns.anycast.kenic.or.ke. ke. 172800 IN NS ns1.coza.net.za. ke. 172800 IN NS mzizi.kenic.or.ke. ke. 86400 IN NSEC kg. NS RRSIG NSEC ke. 86400 IN RRSIG NSEC 8 1 86400 20100203080000 20100127070000 23763 . lbG0ydYHXbtUfZqyGqK6A7ABPgv5/2PF/fV3x8tH3sxQvsgcSbJdi812 tE018KMRFZ3Mgz4zI2300LeLOVbEbcQtO/H45X/IsvUdvd5lw4aTH9No P0MIM/I2E0TNRGb7IIhObmjqjIidOFV0Mw5HV3E4OXfiice/3p+oueD4 P4c= ;; ADDITIONAL SECTION: ns.anycast.kenic.or.ke. 172800 IN A 204.61.216.7 ns1.coza.net.za. 172800 IN A 66.135.62.20 mzizi.kenic.or.ke. 172800 IN A 196.1.4.130 mzizi.kenic.or.ke. 172800 IN A 198.32.67.9 ns.anycast.kenic.or.ke. 172800 IN AAAA 2001:500:14:6007:ad::1 ;; Query time: 317 msec ;; SERVER: 199.7.83.42#53(199.7.83.42) ;; WHEN: Thu Jan 28 12:56:39 2010 ;; MSG SIZE rcvd: 391 Mich:~ michuki$ So which ISP will be the first to provide DNS validation services ? Regards, Michuki.