CVE-2022-3347: go-resolver's DNSSEC validation not performed correctly

The vulnerability stems from two core issues: 1) Missing verification that RRSIG signer names match the queried domain (as explicitly described in GitHub issue #5), and 2) Lack of root key validation. While exact function names aren't provided in available sources, the DNSSEC validation workflow would inherently require these checks in its signature verification and trust chain validation routines. The high confidence comes from multiple independent sources (NVD, GitHub Advisory, issue tracker) consistently describing these specific validation failures as the root cause.