[Dnssec-trigger] A new kind of broken hotspot: RRSIG are OK but NSEC3 are deleted

[Paul Wouters]

On Thu, 27 Oct 2011, Stephane Bortzmeyer wrote:

> May be dnssec-trigger should test NSEC/NSEC3 on non-existent records
> as well?
>
> Signed names are OK since there is no NSEC to send back.

unless they are synthesized from a wildcard.......

Paul