[dns-operations] .PL DNSSEC broken again

[bert hubert]

Hi everyone,

On the ever vigilant PowerDNS IRC channel, a big validating operator
reported seeing .pl bogus PowerDNS responses on apparently unsigned .pl
domain names.

People looked into it and it appears .PL is handing out wrong NSEC3 records.

We have no better diagnosis at this point, but this is not good for DNSSEC
validation adoption. I hope .pl can look into this urgently.

   Bert