DNSSEC is very interesting. Implementing logbook management and rotation for my small hosting ISP was "fun" a few years back :D