I prefer NSEC unless its a large delegation-centric
zone where NSEC3
using opt-out can make sense. I like NSEC because:
* smaller NXDOMAIN response
* easier to grasp
* less bugs in software handling NSEC compared to NSEC3
Good arguments. Thank you.
Jan
