Right -- the whole point of this is to avoid the need for DNSsec on thin clients.My concern would be that the clients would be so thin as to not have any secure transport technology and just "hope" that the link from the DNS server to the client isn't compromised.