Tim

At this point, I'm wondering if the definition of "paradox" is the thing that's at issue here. Exactly what is the paradox? The way I understood it, is that the...

I think this may be related to #16641

Well, disabling DNSSEC validation per [this page in the docs](https://www.nlnetlabs.nl/documentation/unbound/howto-turnoff-dnssec/) does in fact make it work again. I also tried disabling all rules in iptables and the firewall on my...

`dig +tcp loots.eu @1.1.1.1` works fine. I tried with `+dnssec +tpc` to `eu` as well, seeing as somehow that would seem be the issue but everything came through fine.

@wcawijngaards I'm willing to test/troubleshoot stuff, but I'm not smart enough to figure out the steps I can take by myself. Do you have any suggestions? Something that can rule...