Sure, the client application can validate DNSSEC if it is using a DNS library that supports DNSSEC. Examples include: - getDNS - https://getdnsapi.net/ https:/

Sure, the client application can validate DNSSEC if it is using a DNS library that supports DNSSEC. Examples include: - getDNS - https://getdnsapi.net/ https://getdnsapi.net/ - ldns - https://nlnetlabs.nl/projects/ldns/ https://nlnetlabs.nl/projects/ldns/ The application simply has to perform the actual validation itself (versus using another resolver).