said by ctg1701a:Unless a caching server is performing DNSSEC validation or requested by a stub resolver to do so, it will receive the same data from the root servers, or any other servers that may have signed zone data as it does today which should fit in the current UDP 512 byte size and will not contain the DNS signed data. The only reason you would receive and ultimately cache the larger sized UDP packets and signed data and certification data would be if the validation is turned on or requested.
Thanks
Chris Griffiths
Comcast
At last;