@jwildeboer@social.wildeboer.net it's not only dnssec signed Domains. Domains that are not signed are also affected as the signatures of the nsec3 records are also broken. We'll see