<html><head></head><body><div class="yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div dir="ltr" data-setdir="false"><div><div>Hello,</div><div><br></div><div>OpenDNSSEC 2.1.13 running on FreeBSD 13.3.</div><div><br></div><div>Recently, dnsviz.net started reporting the lack of "Denial of existence" DNSSEC option error for all my domains:</div><div><br></div><div>ad2h.mydomain.org/A has errors; select the "Denial of existence" DNSSEC option to see them.</div><div>mydomain.org/CDNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.</div><div>mydomain.org/CDS has errors; select the "Denial of existence" DNSSEC option to see them.</div><div>mydomain.org/AAAA has errors; select the "Denial of existence" DNSSEC option to see them.</div><div>mydomain.org/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.</div><div><br></div><div>Is this due to TTL commented in my kasp.xml or I miss some other settings?</div><div><br></div><div><Denial></div><div> <NSEC3></div><div> <!-- <TTL>PT0S</TTL> --></div><div> <!-- <OptOut/> --></div><div> <Resalt>P100D</Resalt></div><div> <Hash></div><div> <Algorithm>1</Algorithm></div><div> <Iterations>5</Iterations></div><div> <Salt length="8"/></div><div> </Hash></div><div> </NSEC3></div><div></Denial></div><div><br></div><div>Thank you.</div></div><br></div></div></body></html>