Maybe the problem goes away in a new version.

How about telling us version you are running? This has been working for
ages.

DNSViz complains about knotd not doing cookies *on TCP* connections, which is so in the latest releases.  And it's now planned to resolve that in future.

--Vladimir