A new (now February 14, 2012) Internet draft of DNSSEC Operational Practices, Version 2 has been posted.  A working document of the Internet Engineering Task Force (IETF), the document is aimed at zone administrators deploying DNSSEC, and “discusses operational aspects of using keys and signatures in the DNS…issues of key generation, key storage, signature generation, key rollover, and related policies.”  Once approved, it will make obsolete RFC 4641.