When NSEC and NSEC3 records are collected for use in nonexistence proofs, records are accepted if at least one record with the same name passed signature validation. Thus, if the authority section contains a mixture of valid and bogus records with the same name and different types, a bogus NSEC or NSEC3 could be accepted and used in nonexistence proofs.
When NSEC and NSEC3 records are collected for use in nonexistence proofs, records are accepted if at least one record with the same name passed signature validation. Thus, if the authority section contains a mixture of valid and bogus records with the same name and different types, a bogus NSEC or NSEC3 could be accepted and used in nonexistence proofs.