If you’re reading this, either DNSSEC is working correctly for this gTLD domain name, or you’re using a DNS resolver that doesn’t verify DNSSEC.
If you’re doing network debugging, you should definitely check which of those is true…
— Tom Ryder at Inspire Net (JWK-51193-872)