3 ms·I believe that is DNSSEC=allow-downgrade which is also the default.by yrro 4y agoI believe that is DNSSEC=allow-downgrade which is also the default.skissane 4y agoI thought “allow-downgrade” meant it would return unsigned data, but not invalidly signed data? I was talking about the latter case not the former.yrro 4y agoYou could be right. I guess the documentation isn't terribly clear...