On Sat, Feb 20, 2010 at 12:31:38AM +0000, Evan Hunt <each at isc.org> wrote a message of 36 lines which said: > To answer the question, those values are the NSEC3PARAM data for the > zone, as defined in RFC 5155. [...] flags of 1 means opt-out and 0 > means no opt-out; It is not exactly what the RFC says: The Opt-Out flag is not used and is set to zero.