4 ms·
Yep, dnsmasq finally supporting DNSSEC is an excellent thing. Alternative router firmwares such as Tomato Shibby support DNSSEC validation out of the box, than
by jedisct1 11y ago
Yep, dnsmasq finally supporting DNSSEC is an excellent thing.
Alternative router firmwares such as Tomato Shibby support DNSSEC validation out of the box, thanks to this.
I wish more and more routers (most of them running dnsmasq) would also do this.
- rb12345 11y agoOn recent Ubuntu releases, you can enable DNSSEC resolving by adding the following to "/etc/NetworkManager/dnsmasq.d/dnsmasq.conf": dnssec #dnssec-check-unsigned conf-file=/usr/share/dnsmasq-base/trust-anchors.conf Of course, it's possible to strip the signing unless you use Google DNS or whatever and uncomment the "dnssec-check-unsigned" line.
- jedisct1 11y agoWhy isn't is enabled by default?