From c67b13a9aa2c8c4092de28c1bb37e8bbb32dcee3 Mon Sep 17 00:00:00 2001 From: Remi Gacogne Date: Mon, 31 Jan 2022 09:44:15 +0100 Subject: [PATCH] NSEC -> NSEC3 Co-authored-by: Otto Moerbeek --- pdns/validate.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pdns/validate.cc b/pdns/validate.cc index 0edf51dbfa..1613abbec6 100644 --- a/pdns/validate.cc +++ b/pdns/validate.cc @@ -680,7 +680,7 @@ dState getDenial(const cspmap_t &validrrsets, const DNSName& qname, const uint16 if (beginHash == h) { /* The NSEC3 is either a delegation one, from the parent zone, and - * must have the NS bit set but not the SOA one, or a regular NSEC + * must have the NS bit set but not the SOA one, or a regular NSEC3 * either at apex (signer == owner) or with the SOA or NS bits clear. */ const bool notApex = signer.countLabels() < qname.countLabels(); -- 2.47.2