Comcast seems to be going the other way. They are rolling out DNSSEC, and a Comcast technical person commented in the BBR Comcast HSI forum ( »Comcast HSI ) that they don't see how DNS redirection and DNSSEC can be compatible, so while they still have legacy DNS servers that do redirection, none of their DNSSEC work involves redirection.
