The algorithm followed by Zonecheck is "if the server claims to be
recursive, it should be recursive". If it is not, this test is not
performed. In most cases, the proper solution is to disable
recursion. Otherwise, if it is not possible, yes, indeed, the recent
developments following the ISPRIME attack creates a problem.