https://labs.ripe.net/author/dfk/dns-clients-do-request-dnssec-today/