Interesting observation and sorry you have not had the best experience, but we have tens of millions of subscribers using our DNS. If you are experiencing issues with DNS, check out http://dns.comcast.net for some tools and other items. You may also want to look at your router/home gateway and see if its doing DNS proxying. Check out RFC5625 for more information.

You noticed correctly. This will put an end to redirection as we deploy DNSSEC.

Thanks

Chris Griffiths
Comcast

Absolutely correct. We have offered opt-out DNS servers and even IPv6 resolvers for a while now. You now have another option with these Anycast DNS resolvers.

Thanks

Chris Griffiths
Comcast

The point is testing this on smaller TLD. We have been working with .ORG and other TLDs to test DNSSEC for a while now. When the time comes for a signed root and .COM and .NET signed, we will be ready.

Thanks

Chris Griffiths
Comcast

You should read our FAQ on the DNSSEC trial, particularly this section:

http://www.dnssec.comcast.net/faq.htm#faq7

What happens to Comcast Domain Helper, which offers DNS redirect services, when you fully implement DNSSEC?
We believe that the web error redirection function of Comcast Domain Helper is technically incompatible with DNSSEC.
Comcast has always known this and plans to turn off such redirection when DNSSEC is fully implemented.
The DNSSEC trial servers we are announcing today do not have Comcast Domain Helper's DNS redirect functionality enabled.
We plan to update our IETF Internet Draft on this subject, available at http://tools.ietf.org/html/draft-livingood-dns-redirect, to reflect this in the coming months.

Curious where you are testing this from. We verified and none of the servers behind our Anycast system are available off-net.

Thanks

Chris Griffiths
Comcast