Describe cr.yp.to here. http://cr.yp.to/djbdns/forgery.html