It seems like there should be at least some manual override (assuming there isn't one already - I didn't check the details much beyond the article provided) to set your 'my DNS is NX-LYING' flag manually. For machines that are permanently emplaced in a broken DNS network, it can just be turned on and left.
A flag wouldn't be enough, because Chrome also learns what records it returns when it lies, so it can recognize other lies.
A flag wouldn't be enough, because Chrome also learns what records it returns when it lies, so it can recognize other lies.