- NOTIFY/SOAs now can be signed. - Transaction security is checked. - TSIG is checked before evaluating zone state.