Hi, The 'dnssec' branch in my public catlfish repo at git.nordu.net [0] now has working unit tests for validating a DS record, given all support records (including RRSIG's for all the RR's). Let me know if you need any help setting things up. We need more tests. Next step is to add system tests, and getting a full system up and running. [0] git clone https://git.nordu.net/user/linus/catlfish.git