Rickard, > Stephen, is that similar to what you had in mind? > > http://www.opendnssec.se/wiki/Signer/Phase1/HowItWorks This diagram brings a lot of clarity. I cautiously checked it to conform to my ideas (which is what I think these diagrams are there for) and I see a full match. Well done! -Rick