Does anyone object to me changing the "element Iterations" entry in the NSEC3 blob to be a nonNegativeInteger instead of a positiveInteger? This will allow an iterations value of 0... (I'm guessing that the python signer never checked the signconfs?) Then, more importantly, do we need to patch this fix back into the 1.2 branch? Cheers, Sion