I've attempted to drop most of DNSSEC-specific jargon from the intro paragraph, and to convince readers to read on.