Viktor Dukhovni suggests DNSSEC algorithms for TLDs (and everyone else), on the blog.