#2 the DNRD can not support DNSSEC

[Anonymous]

On May 5th, the roll-out of 13 root servers with DNSSEC will be completed.
Due to the DNS changes, the packet size of the responses will increase above 512.
Recent increases in DNSSEC deployment are exposing problems with DNS resolvers that cannot receive large responses.