@badkeys@infosec.exchange My educated guess is they couldn't fit larger keys into their DNS records...