Hi, Thanks for the bug report.
Please note that using NSEC3 for your trivial zone doesn't make sense. So it's not a workaround :-) Daniel Knot DNS
OpenPGP_0x10BB7AF6FEBBD6AB.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature