I'd like to point you to a (currently German only) website which tries to explain interactivly how DNS (and DNSSEC) works: http://www.denic.de/domains/dnssec/dnssec-vv.html It's far from perfect, but might be helpful. You might report errors and wishes directly to me. Oh, btw: ccTLD de is going to publish the DS entry in the root zone on May, 31.