diff --git a/CHANGES b/CHANGES
index cc446dade6..f3e0e468fe 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3631.	[bug]		Remove spurious warning about missing signatures when
+			qtype is SIG. [RT #34600]
+
 3630.	[bug]		Ensure correct ID computation for MD5 keys. [RT #33033]
 
 3627.	[bug]		RPZ changes were not effective on slaves. [RT #34450]
diff --git a/bin/named/query.c b/bin/named/query.c
index c3d63a2003..a2617e08fa 100644
--- a/bin/named/query.c
+++ b/bin/named/query.c
@@ -7155,7 +7155,8 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
 					goto addauth;
 				}
 
-				if (dns_db_issecure(db)) {
+				if (qtype == dns_rdatatype_rrsig &&
+				    dns_db_issecure(db)) {
 					char namebuf[DNS_NAME_FORMATSIZE];
 					dns_name_format(client->query.qname,
 							namebuf,