A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed

https://blog.cloudflare.com/dnssec-nta-ede-33/