Jan Lentfer’s posted the steps to test OpenSSL encryption – I link to them because it’s interesting to see the steps spelled out.

Jan’s also posted a patch to enable DNSSEC support throughout BIND and related tools.  Test if this interests you.  (and it should.)