try to get the root authorities to set up a secure, usable NS-list system
incorporate automatic NS-list upgrades

yell at vendors to provide user-level get_random_bytes()
end-to-end nym-based security
link-level security

DNS over IPv6
