> I wonder btw why Verisign didn't catch the "typo's" in their > own domains if they think it is that important: > ... > ;; QUESTION SECTION: > ;wwww.verisign.com. IN A wildcards don't work that way. there are ns rr's in .com for verisign.com, so you get a referral to those servers no matter whether a *.com wildcard exists or not.