question and answer about dnssec