[dns-operations] dnssec-failed.org and dns.google

[Jan-Piet Mens]

>perhaps by using automated Negative Trust Anchors (NTAs) in certain 
>circumstances

An NTA would have been bad enough for this explicitly broken domain, 
IMO.

	;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
	;; SERVER: 8.8.8.8#53(8.8.8.8)
	;; WHEN: Thu Aug 15 14:41:49 UTC 2019

NOERROR/+AD are still being reported.

	-JP