I notice that .fr currently has 5 DNSKEY records ( 2 x SEP, 3 x non-SEP ), with 2 x RRSIG,and 1 x DS. While there is nothing wrong with this, I was just wondering why this might be, as it seems less than parsimonious. A normal ZSK rollover would only involve 2 x non-SEP I think. George