Authentication Information
Click on the red underlined text to get to the source
... requested. The absence of DNSSEC data in a response MUST NOT by
itself be taken as an indication that no authentication information
exists.
...
... exists.
A resolver SHOULD expect authentication information from signed
zones. A resolver SHOULD believe that a zone is signed if the
resolver has been configured with public key ...