- * @param nsec3s
- * The NSEC3Records to consider.
- * @param qname
- * The qname in question.
- * @param qtype
- * The qtype in question.
- * @param zonename
- * The name of the zone that the NSEC3s came from.
+ * And case 2 can split into two cases:
+ * 2a) NODATA, qtype is DS and we have a matching NSEC3
+ * 2b) NODATA, qtype is DS and we do not have a matching NSEC3
+ *
+ * 1b and 2b end up having the same logic. The NSEC3 that covers the next
+ * closest encloser must have the opt-out bit set.
+ *
+ * @param nsec3s The NSEC3Records to consider.
+ * @param qname The qname in question.
+ * @param qtype The qtype in question.
+ * @param zonename The name of the zone that the NSEC3s came from.