A soon-to-be-available help for the Verisign problem is coming from ISC: http://www.isc.org/products/BIND/delegation-only.html. So while you are upgrading all of your SSH and sendmail installations, have at your name server as well!