Oh, yes you should absolutely do that. What I meant is that in the case of prod you can stop all recursive DNS beyond the resolvers you own. But absolutely, all

Oh, yes you should absolutely do that. What I meant is that in the case of prod you can stop all recursive DNS beyond the resolvers you own. But absolutely, all DNS should have to go through resolvers that you own.