(smiling) You already know the answer - "it depends". What websites were they visiting? If they were going to a lot in .SE, then they might have had a good bit

(smiling) You already know the answer - "it depends". What websites were they visiting? If they were going to a lot in .SE, then they might have had a good bit of DNSSEC validation happening. If they were going to .COM websites they probably would have had very little.