NextDNS is a validating DNSSEC resolver. This means that we block any response that has an invalid DNSSEC signature or is not signed on a zone that is DNSSEC enabled. Unfortunately, many big domains are not DNSSEC enabled, which is why this number is so low.

Did this answer your question?