Wait, wait, wait, wait, wait… now I remember conversing with you. So you run IPFire? Yeah, my comments regarding the convenience of GL ddns v deSEC.io doesn’t apply to you. You can handle the cli & LuCI to get proper ddns DNSSEC.
Hell, I’ll even post the conf of my deSEC conf for you to template from. It’s stupidity easy once you SSH into your device & install the nano editor:
opkg update && opkg install nano
Given the philosophy of use behind IPFire, I’d say you & I would be doing yourself a disservice if you skipped DNSSEC.