A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed | EngBrief