The issues I reported in December sadly remain unaddressed: http://dnssec-stats.ant.isi.edu/~viktor/dnsviz/registrar-servers.com.html https://twitter.com/VDukhovni/status/1272376899692630017 Surely building NSEC chains that don't omit wildcards is not *that* difficult. -- Viktor.