Hey @quad9dns - big fan of your service. It looks like your DNSSEC is mis-configured though. Oversight? Without DS records for your TLD, dns.quad9.net is essentially untrusted.