Unable to get authenticated negative responses from BIND 9.6.0 w/ NSEC3?

[Johan Ihren]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Mark,

>>>> Anyone done this recently who can give me a suggestion to where I  
>>>> may
>>>> go wrong?
>
> 	NXDOMAIN + OPTOUT -> AD=0

Doh! I reversed the logic for OPTOUT in my apparently confused head.  
Many thanks for the quick correction. Everything works just as expected.

Johan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFJbG6jKJmr+nqSTbYRAiEjAJkBVg5vfoPLjjKa+O2N5I1fJnyoeACeP0yA
ig4M1FlGnf1bXP51SCP2oYw=
=PFp0
-----END PGP SIGNATURE-----