3 ms·

Please write a blog on this

• dotwaffle 4y ago
  A blog on this.
  • dotwaffle 4y ago
    And I may well do. But it's probably not the best idea to do this on a larger scale, there are valid reasons why this is not a good thing to recommend -- if you miss one part (DNSSEC signing, or running a local validating resolver) you can end up with a vulnerable system.