I was testing this, and I can get to the page by either disabling DoT with DNSSEC enabled, or by leaving DoT enabled but then disabling DNSSEC. With both DNSSEC and DoT running, dig at command prompt comes back with a SERVFAIL message. So for me, in this scenario, with both DNSSEC and DoT...