From debdd09611448c40d11fcc72e9704f53390ff66d Mon Sep 17 00:00:00 2001
From: Willem Toorop <willem@nlnetlabs.nl>
Date: Wed, 10 Feb 2021 12:46:47 +0100
Subject: [PATCH] Adhere to draft-ietf-dnsop-nsec-ttl with signing

---
 Changelog | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Changelog b/Changelog
index 5ade564a..1cb47686 100644
--- a/Changelog
+++ b/Changelog
@@ -20,6 +20,8 @@
 	  Enable with --enable-rrtype-svcb-https.
 	* bugfix #117: Assertion failure with DNSSEC validating of 
 	  non existence of RR types at the root.  Thanks ZjYwMj
+	* Set NSEC(3) ttls to the minimum of the MINIMUM field of the SOA
+	  record and the TTL of the SOA itself. draft-ietf-dnsop-nsec-ttl
 
 1.7.1	2019-07-26
 	* bugfix: Manage verification paths for OpenSSL >= 1.1.0
-- 
2.47.3