Mockapetris on DNS vulnerabilities and defenses
by Andy Oram
Related link: http://news.com.com/2010-1071-979587.html
I thought this was nice summary of where the DNS might be subject to attack and what could be done to protect it. Summary: the TLD servers should diversify in the same way that the root does.