Not really related other than being a different mess, but I've been running with DNSSEC enabled for a few months and it seems developer.apple.com is one of the

Not really related other than being a different mess, but I've been running with DNSSEC enabled for a few months and it seems developer.apple.com is one of the few that fail DNSSEC validation (due to two different issues :/) and has been for a while (maybe always): https://dnsviz.net/d/developer.apple.com/dnssec/ https://dnsviz.net/d/developer.apple.com/dnssec/ My favorite DNSSEC issue is that Verisign's DNSSEC checker fails DNSSEC: https://dnsviz.net/d/dnssec-analyzer.verisignlabs.com/dnssec/ https://dnsviz.net/d/dnssec-analyzer.verisignlabs.com/dnssec... At least there is an easy solution to this mess, just remove it entirely. It is obvious that almost no one uses it.