Hi, On Mar 2, 2012, at 11:05 , Peter van Dijk wrote: > Hello, > > ldns-signzone currently sets flags=1 in NSEC3PARAM generation, when NSEC3 (the -p flag) is enabled. when NSEC3 *opt-out* is enabled, of course. Kind regards, Peter van Dijk