DNSSEC doesn't do anything if the DNS resolver doesn't support it, so by changing people's DNS to point to a funky resolver they effectively disable DNSSEC.
DNSSEC doesn't do anything if the DNS resolver doesn't support it, so by changing people's DNS to point to a funky resolver they effectively disable DNSSEC.