RFC 8483 says "All Yeti-Root server names are DNSSEC signed". May be it was true at the time of the RFC publication? Because it is false now, yeti.bofh.priv.at, yeti.ipv6.ernet.in, yeti.aquaray.com, yeti-ns.ix.ru, and yeti-ns.wide.ad.jp appear to be unsigned. Should I file an errata?