https://labs.ripe.net/author/mirjam/do-you-have-dnssec-validation-enabled/