Apparently the version of BIND that comes with DragonFly is not built with support for DNSSEC.  Matt Dillon posted from NYCBSDCon noting that, after hearing Jeremy C. Reed’s “Introduction to DNSSEC” presentation, maybe we should.  Peter Avalos has a different argument: why bundle BIND at all?