RFC 8198: Aggressive Use of DNSSEC-Validated Cache
Implementing this would probably require some changes in the cache, but I think it will be worthwhile as it creates less work for resolver and less work for authoritative.
Closed by: !422
issue