missing comma and put DNSSEC compromise in ()s