etc/resolv.conf: add option trust-ad

This commit is contained in:
Aminda Suomalainen 2020-07-20 23:11:55 +03:00
parent 9cc80604d4
commit a8e9d7d81f
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723
1 changed files with 3 additions and 1 deletions

View File

@ -20,7 +20,9 @@ nameserver 9.9.9.9
nameserver 2620:fe::9
# CloudFlare IPv4 #1
#nameserver 1.1.1.1
options edns0 single-request-reopen
# trust-ad option is required from glibc2.31+ to tell everything to trust
# AD/DNSSEC in case there is a localhost DNS server that validates it
options edns0 single-request-reopen #trust-ad
# I am not entirely sure local is valid to use here. And this has a bad
# habit of flooding nameserver with names I don't want it to know about
# and in some cases there are _fun_ A/AAA responses to nonexistant domains.