Regarding the DNSSEC bug -- does that even matter for DragonFly -- did the DragonFly ever get built with openssl? (I was working on it last year, but I don't think I ever committed simple patch before switched to git.)
See thread: Subject: Re: need to build bind w/ crypto support.
