I monitor DNS queries made by some of my servers by setting a DoH server to systemd-resolve, some of the top queries are: - OCSP servers to query TLS certifica

I monitor DNS queries made by some of my servers by setting a DoH server to systemd-resolve, some of the top queries are: - OCSP servers to query TLS certificate validity. This is necessary because I have configured my web server to staple OCSP responses. (`e1.o.lencr.org`) - Software repos (apt, dnf, etc). `livepatch.canonical.com` being the top contender. - GitHub The only place that TXT records are used in the very popular use cases would be an email server. SPF, DMARC, and DKIM all piggy back in TXT records. I would also imagine a lot of Microsoft stuff like AD use DNS .