Mention that a DNSSEC-validating resolver is used for reverse DNS lookups

onionoo does DNS lookups for some fields, please use a DNSSEC validating resolver.

I don't think it is necessary to add new fields but lets add it to the description of the _host_names fields

Edit: We already do this, but we still should add some text to the spec.