via @jedisct1
via https://www.22decembre.eu/2017/02/19/dnssec-en/
via @bortzmeyer
via @oxhak