The netexternal.cgi has been extended to show what type of DNSSEC support the upstream nameservers offer.