DNSSEC%20Opt-In

1
DNSSEC Opt-In

• -03 to -04 Editorial changes only.
• -02 to -03
• Interaction with wildcards clarification
• AD-bit clarification
• Validation process changes made more explicit

2
DNSSEC Opt-In

• Validation process changes
• Nothing new, but the text was made more explicit
• AD-bit clarification short form
• AD bit 0 when answer is covered by Opt-In NXT
• Wildcard clarification short form
• NXDOMAIN responses covered by Opt-In NXT do not
  need NXT records proving no wildcard exists.