diff --git a/nsd-4.1.10.tar.gz.asc b/nsd-4.1.10.tar.gz.asc
new file mode 100644
index 0000000..6fdc39d
--- /dev/null
+++ b/nsd-4.1.10.tar.gz.asc
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+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+=E4/n
+-----END PGP SIGNATURE-----
diff --git a/nsd.changes b/nsd.changes
index a4feb12..fc20aa2 100644
--- a/nsd.changes
+++ b/nsd.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Mon Aug  8 13:10:49 UTC 2016 - adam.majer@suse.de
+
+- reword description and summary
+- add signature file and basic keyring (currently only contains
+  signature of the released version since upstream doesn't seem
+  to distribute a real keyring)
+- remove redundant nsec3 configure option which are enabled by default
+- remove obsolete --enable-draft-rrtypes configure
+
 -------------------------------------------------------------------
 Wed Jun 29 01:11:13 UTC 2016 - mrueckert@suse.de
 
diff --git a/nsd.keyring b/nsd.keyring
new file mode 100644
index 0000000..953fdd9
Binary files /dev/null and b/nsd.keyring differ
diff --git a/nsd.spec b/nsd.spec
index 129fc26..3d4da61 100644
--- a/nsd.spec
+++ b/nsd.spec
@@ -48,27 +48,23 @@ PreReq:         %insserv_prereq %fillup_prereq pwdutils
 #
 Url:            http://open.nlnetlabs.nl/nsd/
 Source:         http://open.nlnetlabs.nl/downloads/nsd/nsd-%{version}.tar.gz
+Source5:        https://www.nlnetlabs.nl/downloads/nsd/nsd-%{version}.tar.gz.asc
+Source4:        nsd.keyring
 Source1:        nsd.service
 Source2:        tmpfiles-nsd.conf
-Source3:        %{name}.init
+Source3:        nsd.init
 #
-Summary:        An authoritative only, high performance, simple and open source name server
+Summary:        An authoritative only, high performance domain name server
 %description
-NSD is a complete implementation of an authoritative DNS name server.  For
-further information about what NSD is and what NSD is not please consult the
-REQUIREMENTS document which is a part of this distribution (thanks to Olaf).
-
-Authors:
---------
-    NSD team <nsd-team@nlnetlabs.nl>
-
+NSD is a complete implementation of an authoritative domain name server developed
+by NLnet Labs with the purpose of creating more diversity in the DNS landscape.
 
 %prep
 %setup
 
 %build
-export CFLAGS="$RPM_OPT_FLAGS -fPIE -Wformat-nonliteral -Wformat-security"
-export LDFLAGS="-pie -Wl,-z,relro,-z,now"
+export CFLAGS="${RPM_OPT_FLAGS} ${CFLAGS} -fPIE -Wformat-nonliteral -Wformat-security"
+export LDFLAGS="${LDFLAGS} -pie -Wl,-z,relro,-z,now"
 %configure                             \
     --with-configdir=%{configdir}      \
     --with-zonesdir=%{configdir}       \
@@ -79,12 +75,10 @@ export LDFLAGS="-pie -Wl,-z,relro,-z,now"
     --enable-root-server               \
     --enable-bind8-stats               \
     --enable-zone-stats                \
-    --enable-nsec3                     \
     --enable-mmap                      \
     --with-user=%{name}                \
-    --enable-ratelimit                 \
-    --enable-draft-rrtypes
-%{__make}  %{?_smp_mflags}
+    --enable-ratelimit
+make %{?_smp_mflags}
 iconv -f iso8859-1 -t utf-8 doc/RELNOTES > doc/RELNOTES.utf8
 iconv -f iso8859-1 -t utf-8 doc/CREDITS > doc/CREDITS.utf8
 mv -f doc/RELNOTES.utf8 doc/RELNOTES
@@ -93,7 +87,7 @@ mv -f doc/CREDITS.utf8 doc/CREDITS
 %install
 make install DESTDIR="%{buildroot}"
 for i in %{buildroot}%{configdir}/*.sample ; do
-    %{__cp} -v $i ${i%%.sample} ;
+    cp -v $i ${i%%.sample}
 done
 
 chmod -Rv o= %{buildroot}%{configdir}/
@@ -113,9 +107,6 @@ install -D -m 0755 %{S:3}              %{buildroot}%{_sysconfdir}/init.d/%{name}
 ln -s -f %{_sysconfdir}/init.d/%{name} %{buildroot}%{_sbindir}/rc%{name}
 %endif
 
-%clean
-%{__rm} -rf %{buildroot};
-
 %pre
 #
 # e.g. adding user