The removing of DNSSEC and Validation on the 'Original' Nameserver space switched to DNS over HTTPS
I would like to say, that most people don't seem to understand the security concerns associated by using Cloud Technology, which employ's the use of DNS over HTTPS and such. In using this method of resolving domains and hosts an such, it seems that security has been quite broken and is rendered inoperable on several lays which have existed prior to the Cloud and such.
If you goto a site, and you have a plugin which detects and tells you information on the Domain and it DNSSEC condition a common thing i have found when trying to authenticate a website is that most cases it reports that the site does not use DNSSEC and it is prone to man-in-the-middle (MITM) attacks on the client end.
A SIDE NOTE: When you goto a website for instance, in the USA on the .gov side, it says that
the site is verifiable via the lock on the URL bar, this is a misleading statement as, if you mouse over the lock it tells you who the SSL Certificate that Signed the Web page is from. When you goto something like dhs.gov and it was for a while signed by the CA (Certificate Authority) of Let's Encrypt. This is very Dangerous - VERIFY THE ICON LOCK AND WEBSITE SIGNING AUTHORITY AND THE CERTIFICATE. (i use Firefox and a plugin to accomplish this, or do page info under tools and then select security, and then view certificate)