Analysis of existing CDS/CDNSKEY records in the wild. They are sometimes broken, sometimes in funny ways (authortative name servers not returning the samed CDS...)
Why would a domain in .com publish a CDS (.com does not handle CDS) and a broken one (does not match the keys)?