3 ms·

That's what I want to do: enabled dnssec in dnsmasq and run it on my router.

• jedisct1 11y ago
  Yep, dnsmasq finally supporting DNSSEC is an excellent thing. Alternative router firmwares such as Tomato Shibby support DNSSEC validation out of the box, thanks to this. I wish more and more routers (most of them running dnsmasq) would also do this.
  • rb12345 11y ago
    On recent Ubuntu releases, you can enable DNSSEC resolving by adding the following to "/etc/NetworkManager/dnsmasq.d/dnsmasq.conf": dnssec #dnssec-check-unsigned conf-file=/usr/share/dnsmasq-base/trust-anchors.conf Of course, it's possible to strip the signing unless you use Google DNS or whatever and uncomment the "dnssec-check-unsigned" line.
    • jedisct1 11y ago
      Why isn't is enabled by default?