Quick reaction: There are a few "Internet critical resources" that need to be centralized for the otherwise decentralized Internet to work. No ways around them seem to exist. In the case of the DNS hierarchy, it's namespace management that is centralized. The technical protocol operations are largely decentralized. In the case of DNSSEC, the de-centralized model may remain (in protocol operations, despite some difficulties). DLV and other TAR initiatives were mentioned. There is also "DNS Root Nameservice Substitution for DNSSEC Purposes" (http://www.connotech.com/six_roles_for_dnssec.pdf). Like other alternate DNS root initiatives, the most likely fate for these is to die because the centralized technical support required for the centralized namespace management will become adequate. It is important for these things to be discussed. But hopefully the much needed technical controls of DNSSEC are not delayed by misunderstanding of the issues at stake. DNSSEC deployment may proceed without change in the institutional arrangements.