- Query zones for NSEC3PARAM.
- Check RRSIG label count against number of labels in the RRset owner name.
- Check for delegation-related bits when evaluating a wildcard.
- Add NO_NS_IN_PARENT_NXDOMAIN error.
- Add references (e.g., RFC) to errors and warnings.
- Add checks for RFC 8624, DNSSEC algorithm implementation requirements.
- Add checks for RFC 9276, NSEC3 parameter settings.
- Allow colors to be printed (dnsviz print) even when support not detected.
- Use two extra labels when querying for NXDOMAIN response.
- Compare DNSSEC negative response consistency.
- Query for CDS and CDNSKEY, visualize responses, and check for record correctness and consistency.
- Make --nsid the default for dnsviz probe.
- Add support for mult-signer environment
- Fix various bugs and compatibility issues.
**Full Changelog**: https://github.com/dnsviz/dnsviz/compare/v0.9.0...v0.10.0
Thanks to all those who contributed!