Does DNSSEC require that my
NS2 stored at the registrar be authoritative, or just that they answer for the domain? Can they be non-authoritative DNS servers answer the query?
Does anything specify what happens at that point in time?
From the BIND DNSSEC Guide,
What happens in the above circumstance if the fbi.gov name server that is written in the
ns1 at the registrar is non-authoritative but has all the appropriate records?