Is it normal that per default DNSSEC is not check? thanks
Yes, that's normal. Don't confuse it with DNS encryption. DNSSEC is quite slow and error-prone.
