A Balanced DNS Information Protection Strategy: Minimize at Root and TLD, Encrypt When Needed Elsewhere S. Hollenbeck, B. Kalinski (Verisign)