- expect dnssec by default now.
* dsa-check-zone-rrsig-expiration:
- in the OK message, clarify we only check sigs at the zone apex.
- expect dnssec by default now.
* dsa-check-zone-rrsig-expiration:
- in the OK message, clarify we only check sigs at the zone apex.