K 10 svn:author V 7 mandree K 8 svn:date V 27 2014-03-10T17:01:14.423788Z K 7 svn:log V 724 Upgrade to new upstream test release #11. Git shortlog since test release #9: Speeling. Strip DNSSEC RRs when query doesn't have DO bit set. Return INSECURE when validation fails with proved non-existent DS. Negative caching for DS records. Check that unsigned replies come from unsigned zones if --dnssec-check-uns Tidy. Fix off-by-one overwrite. Don't free blockdata for negative DS cache entries. Handle replies with no answers and no NS in validate_reply. Tweak tuning params. Don't cache secure replies which we've messsed with. Mass edit of INSECURE->BOGUS returns for server failure/bad input. Can have local DS records (trust anchors). END