Man, it's 2011, not 1983. If a device can run TLS, it can run DNSSEC.