diff --git a/spec/example-all-functions.c b/spec/example-all-functions.c
index 987c3f78..598fec14 100644
--- a/spec/example-all-functions.c
+++ b/spec/example-all-functions.c
@@ -230,7 +230,7 @@ retcharstar = getdns_convert_alabel_to_ulabel(
 );
 
 retregular = getdns_validate_dnssec(
-  bindataarg,
+  listarg,
   listarg,
   listarg
 );
diff --git a/spec/getdns-0.395.tgz b/spec/getdns-0.395.tgz
deleted file mode 100644
index 36e500aa..00000000
Binary files a/spec/getdns-0.395.tgz and /dev/null differ
diff --git a/spec/getdns-0.396.tgz b/spec/getdns-0.396.tgz
new file mode 100644
index 00000000..2e0e8528
Binary files /dev/null and b/spec/getdns-0.396.tgz differ
diff --git a/spec/getdns_core_only.c b/spec/getdns_core_only.c
index 7572be37..c86b4425 100644
--- a/spec/getdns_core_only.c
+++ b/spec/getdns_core_only.c
@@ -297,7 +297,7 @@ getdns_convert_alabel_to_ulabel(
 
 getdns_return_t
 getdns_validate_dnssec(
-  struct getdns_bindata  *record_to_validate,
+  struct getdns_list     *record_to_validate,
   struct getdns_list     *bundle_of_support_records,
   struct getdns_list     *trust_anchor_rdatas
 )
diff --git a/spec/getdns_core_only.h b/spec/getdns_core_only.h
index fc73f935..1408897f 100644
--- a/spec/getdns_core_only.h
+++ b/spec/getdns_core_only.h
@@ -1,4 +1,4 @@
-/* Created at 2014-02-18-14-12-28*/
+/* Created at 2014-02-18-14-20-52*/
 #ifndef GETDNS_H
 #define GETDNS_H
 
@@ -524,7 +524,7 @@ getdns_convert_alabel_to_ulabel(
 
 getdns_return_t
 getdns_validate_dnssec(
-  struct getdns_bindata  *record_to_validate,
+  struct getdns_list     *record_to_validate,
   struct getdns_list     *bundle_of_support_records,
   struct getdns_list     *trust_anchor_rdatas
 );
diff --git a/spec/index.html b/spec/index.html
index dba24195..3df4849f 100644
--- a/spec/index.html
+++ b/spec/index.html
@@ -2032,16 +2032,16 @@ getdns_convert_alabel_to_ulabel(
 can use the <code>getdns_validate_dnssec()</code> helper function.</p>
 <div class=forh>getdns_return_t
 getdns_validate_dnssec(
-  struct getdns_bindata  *record_to_validate,
+  struct getdns_list     *record_to_validate,
   struct getdns_list     *bundle_of_support_records,
   struct getdns_list     *trust_anchor_rdatas
 );
 </div>
-<p class=cont>The <code>record_to_validate</code> is the resource record being validated. The API
-will use the resource records in <code>bundle_of_support_records</code> and the RDATAs in the
-<code>trust_ancor_rdatas</code> as trust anchors. The function returns one of
-<code>GETDNS_DNSSEC_SECURE</code>, <code>GETDNS_DNSSEC_BOGUS</code>,
-<code>GETDNS_DNSSEC_INDETERMINATE</code>, or <code>GETDNS_DNSSEC_INSECURE</code>.</p>
+<p class=cont>
+The <code>record_to_validate</code> is the resource record being validated together with the associated signatures.
+The API will use the resource records in <code>bundle_of_support_records</code> to construct the validation chain and the DNSKEY or DS records in <code>trust_anchor_records</code> as trust anchors.
+The function returns one of <code>GETDNS_DNSSEC_SECURE</code>, <code>GETDNS_DNSSEC_BOGUS</code>, <code>GETDNS_DNSSEC_INDETERMINATE</code>, or <code>GETDNS_DNSSEC_INSECURE</code>.
+</p>
 
 <p>There are two functions that help process data:</p>
 
@@ -2428,7 +2428,7 @@ The response dicts inherit the custom memory management functions and the value
 
 <h1>9. The Generated Files</h1>
 
-<p>There is <a href="getdns-0.395.tgz">a tarball</a> that includes the .h files,
+<p>There is <a href="getdns-0.396.tgz">a tarball</a> that includes the .h files,
 the examples, and so on. The examples all make, even though there is no API implementation, based
 on a pseudo-implementation in the tarball; see make-examples-PLATFORM.sh. Note that this currently builds fine
 on the Macintosh and Ubuntu; help is definitely appreciated on making the build process