comments on how DNSSEC is going to work
Fix the headers