It's too bad that DJB's full dnscurve (http://dnscurve.org) suite didn't take off like dnscrypt did, but that does require changing the DNS server names at the registrar to include the key in the domain name, and having support throughout the resolver chain.

That said, I've been running dnscurve for a few years on my authoritative internet-facing servers ( `dig ns artcs.net` to see what it looks like), and I generally see between 5-10% of requests coming in as wanting encryption. Most of these are requests from OpenDNS, which supports the protocol.

It's gaining more and more traction, and is a far stronger protection mechanism from actual threats than DNSSEC. </biased as the guy who sponsored DNSCrypt creation>