On Fri, Nov 07, 2008 at 11:16:45AM +0200,
Benzi Mizrahi wrote
a message of 21 lines which said:

> it is written "Use resolvers that are DNSSEC capable...".

Resolvers, not stub resolvers.

> My question is what is resolver to thousands of computers scattered
> all over the campus network?

I assume they do not resolve completely themselves but they talk to
two or three "real" resolvers. In that case, you may enable DNSSEC
only on those two or three.