fixed validation of root DS
The root DS exists outside of DNS hierarchy, so its NSEC proving non-existence always contains the SOA, as that's the root of DNS and there's nothing above it.
It's reproducible by asking for DS .
Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.
The root DS exists outside of DNS hierarchy, so its NSEC proving non-existence always contains the SOA, as that's the root of DNS and there's nothing above it.
It's reproducible by asking for DS .