On Sat, Dec 08, 2018 at 07:18:05PM +0800, Davey宋 <ljsong at biigroup.cn> wrote a message of 29 lines which said: > Tested. Forwarder double-check even when dnssec is turn on. Some kinds > of inertia before DNSSEC? Or may be because the zone was not signed? Do you get the AD bit?