[nznog] DNSSEC single point of failure?

Unless I'm missing something, looks like my internal dns stopped working because there were issues with the link to the US. All because dnssec is enabled in bind. Namely queries from a resolver server would timeout looking up MYHOST.MYDOMAIN.com.dlv.isc.org before it got to querying my authoritative server. Is there any way to work around that? Seems like a single point of failure, where resolvers will fail if there are any issues with com.dlv.isc.org. Thanks. -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com