I think it would be good if Sky added DNSSEC support to their DNS servers. DNSSEC is a technology that verifies DNS records have not been modified fraudulently by checking their authenticity.
Granted, users can configure their devices to use third party DNS servers such as Google's for their queries, but it would be nice to see first party support as well.
The DNS query below should fail on a DNSSEC-aware DNS server due to an intentionally broken signature.
>nslookup sigfail.ippacket.stream 8.8.8.8
Server: dns.google
Address: 8.8.8.8
*** dns.google can't find sigfail.ippacket.stream: Server failed
>nslookup sigfail.ippacket.stream 90.207.238.97
Server: dns1.skybroadband.com
Address: 90.207.238.97
Non-authoritative answer:
Name: sigfail.rsa2048-sha256.ippacket.stream
Addresses: 2a01:4f8:13b:2048::113
195.201.14.36
Aliases: sigfail.ippacket.stream
