Each domain with a DS-Record must have at least 2 NS-Records

[pfedick]

When there is a DS-RR for a domain name, there must also be at least 2 NS-RR. This is a requirement of the german registry DENIC.

Regards,
Patrick

[regnauld]

That's a question of policy - I don't think this should be a hardcoded requirement ?

Having a configurable policy (e.g. using LUA) would be one way to do this. Maybe Anton has another suggestion :)

[tobez]

What is wrong with using the existing "single-ns" policy check?
It is different from what you want because is always requires to be at least 2 NS records per name, but maybe you can use it anyway?