New version of Linux' systemd has DNSEC validation enabled by default: http://news.softpedia.com/news/systemd-230-launches-with-dnssec-enabled-by-default-in-systemd-resolved-more-504339.shtml