In this episode, Matt and Cricket congratulate an administrator at a community-spirited ISP for wanting to lock down recursion on his name servers and offer their opinions on when you should sign your zones using DNSSEC.