Am 13.04.2017 um 10:17 schrieb W.C.A. Wijngaards via Unbound-users: > Unbound 1.6.2rc1 maintainers prerelease is available: > - --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and > DS records. NSEC3 is not disabled. I tried --disable-sha1 and found any org. zone no longer got validated (was handled like unsigned) Andreas