I&#39;d have to dig through all our internal discussions to see why we have our setting.  To be honest,  a lot of opendnssec policy values and examples appear to be best practice ;)<br>
<br>
alan<br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.