How come I have zero problems with any .de domain I tried accessing in the last half hour?
maybe your upstream doesn't validate DNSSEC?
cache
maybe your upstream doesn't validate DNSSEC?