-
This reverts commit 7d06e409b2ecd79ee912274cea293c495dd1b8d3. The reason is that using resolver to directly obtain the DS record is bad: it only checks the DS record at one of the authoritative NS servers of the parent domain, not all. Also, it's a bit crappy to use resolvers this way. The solution is the configuration-generating script.
ccb1b860