When you say > DNSSEC deployment may proceed without change in the > institutional arrangements. I am suspect. IMO, there is a real risk that once a technical solution for root signing is in place that the institutional arrangements for root zone management become even more resistant to any future change. Such an outcome has nothing to do with the technical solution chosen to sign the root. It's easy enough for another institution(s) to assume that duty as long as they are competent. Rather, the problem is that once an institution controls something that might be leveraged to achieve other policy goals, they'll be very reluctant to relinquish that power.