A comment that came up internaly from folk who are not directly involved: The charter says that the group will not look at key distribution infrastructure. So they are not going to distribute keys in the DNS after all? I think its just a wording issue, insert the word 'other' appropriately.