If someone who knows something about DNSSEC wrote a blog post explaining it to noobs, I'm sure it'd make the front page of HN. Bonus points if you include some

If someone who knows something about DNSSEC wrote a blog post explaining it to noobs, I'm sure it'd make the front page of HN. Bonus points if you include some information that's actually actionable for those of us who host our own DNS servers but aren't DNS experts.