On this page6.1.4. Flags6.1.4. Flags The OPT record's flags field is currently defined to hold only one flag: the DNSSEC OK flag (DO), as specified in [RFC3225].