Anybody on this list having contact to the maintainer / webmaster of havedane.net ? It's having dns issues when the TLSA record is queried with qname minimization active (RFC 7186). This is a bug in the dns server or dnssec signer and should be fixed. Otherwise false negatives are generated!
See this dnsviz link for a description of what is wrong: http://dnsviz.net/d/ _25._tcp.do.havedane.net/dnssec/ - tmolitor
