When a changeset is applied to zone, where SOA minimal TTL changes, we shall re-build NSEC(3) chain completely.
Moreover, when a NSEC(3) record is changed by just changing its TTL, we must still consider it changed and e.g. re-sign it correctly.
Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.
When a changeset is applied to zone, where SOA minimal TTL changes, we shall re-build NSEC(3) chain completely.
Moreover, when a NSEC(3) record is changed by just changing its TTL, we must still consider it changed and e.g. re-sign it correctly.