Chris Hofstaedtler

> But the protection you describe only works via the API - i.e. the protection can still be violated by direct SQL changes to METADATA Sure, but this is also...

generally lgtm, modulu naming nit

I've rebased this on top of current master and reworded the texts. Maybe @jsoref wants to give them a re-read? Could this land in 4.7.0?

> I'm no fan of the option name 'compare-signatures-on-zone-freshness-check'. It is over descriptive but it is still unclear what it is actually doing. I think i prefer something like 'disable-signatures-freshness-check'...

Renamed the setting `secondary-check-signature-freshness` (not a fan of inverted option names), applied text feedback, added some words to discourage disabling the setting. Setting is now only checked once in slaveRefresh,...

2 cents: 1) this sample conveniently leaves out the fact that there might be more than one qtype in the response, which doesn't even have to be an A. 2)...

Can this be something this module can install? I'm also not sure how to apply this so it would work on a first run? Getting apt/dpkg out of the failure...

Rgd. android parser: actually this is SimpleDateFormat (https://developer.android.com/reference/java/text/SimpleDateFormat.html), which requires that you know in advance how many digits the sub-second part has. So it could do 6 or 12 digits...

I can't find any actual formatting in the official docs, so maybe there are no commitments. For interop reasons, a standard 3-digit / millisecond-only format would still be great to...

As mentioned in the Debian report, xorriso should be a maintained drop-in replacement, if called as `xorriso -as mkisofs`. (mkisofs is the name of genisoimage from before the cdrkit fork.)...