This site now supports DNSSEC and makes use of some “cool new” record types. I did a short writeup as a gist - maybe it is of help for someone: gist