Signed SU domain zone!

ICANN keeps statistics on signed top-level domains. Recently, there appeared information that the SU zone is signed. At the moment, DS entries in the root zone are not published, which means that the trust chain cannot yet be established.
In addition, active work is underway on the draft "DNS-based Authentication of Named Entities". The document will be of interest to those who actively use certificates in their work.