Hi, I recently noticed that PowerDNS returns some superfluous NSEC3 records for a NOERROR response - i have created a ticket + patch for this, see http://wiki.powerdns.com/trac/ticket/537 Christof -- http://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org