Yeah, it's pretty bad. There used to be herror() but it appears to have been deprecated. An central error checking function in the standard library wouldn't b

Yeah, it's pretty bad. There used to be herror() but it appears to have been deprecated. An central error checking function in the standard library wouldn't be a terrible addition. Handling GUI stuff sensibly is going to be an even larger nightmare, but at least frameworks like Cocoa and Qt should be able to help do this right. There's a large bridge right now for GUI error reporting that should be handled more gracefully in a lot of cases, not just for DNSSEC, frameworks need a graphical perror() in general. In any case, DNSSEC certainly makes this all a bit more trouble.