From: Evan Hunt Date: Fri, 3 Jul 2026 07:01:30 +0000 (+0000) Subject: fix: usr: Unvalidated opt-out NSEC3 could be accepted in insecurity proof X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=d2350fc546a637881af95c19d8e5d8eb4c447708;p=thirdparty%2Fbind9.git fix: usr: Unvalidated opt-out NSEC3 could be accepted in insecurity proof When determining whether an insecure delegation is legitimate, NSEC3 opt-out records which had not yet passed validation could be used. This has been fixed. Closes #5970 Merge branch '5970-pending-nsec3' into 'main' See merge request isc-projects/bind9!12283 --- d2350fc546a637881af95c19d8e5d8eb4c447708