Comment by yuhong

Personally I think a new DNSSEC2 based on for example online signing might be a good idea.