fixed spelling
added comment on key tags
added comment on key size and algorithm
NSEC or NSEC3 must cover the qname
added key tag matching