On Thu, Nov 19, 2009 at 12:35:44AM +1100, Mark Andrews <marka at isc.org> wrote a message of 46 lines which said: > The update code looks at the previous NSEC3 record and if it has > optout set OK, thanks, RFC 5155, section 3.1.2, I understand now.