NSEC -> NSEC3

Co-authored-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>
(cherry picked from commit c67b13a9aa2c8c4092de28c1bb37e8bbb32dcee3)

diff --git a/pdns/validate.cc b/pdns/validate.cc
index 0edf51dbfa72c1d9b8bf498d17fe9879a2fef70b..1613abbec66a234e3badbef4000d593448a97c5b 100644 (file)
--- a/pdns/validate.cc
+++ b/pdns/validate.cc
@@ -680,7 +680,7 @@ dState getDenial(const cspmap_t &validrrsets, const DNSName& qname, const uint16
         if (beginHash == h) {
 
           /* The NSEC3 is either a delegation one, from the parent zone, and
-           * must have the NS bit set but not the SOA one, or a regular NSEC
+           * must have the NS bit set but not the SOA one, or a regular NSEC3
            * either at apex (signer == owner) or with the SOA or NS bits clear.
            */
           const bool notApex = signer.countLabels() < qname.countLabels();