That’s not how DNSSEC works… it’s sole purpose is signing - not encryption.

> https://www.rfc-editor.org/info/rfc9364/#name-dnssec-core-do...