Comment by akerl_

4 hours ago

Can you link to a distro config that defaults to that?

No, it's experimental. But I run it on all my machines, the only time I've had a problem is when it caught a typo in a DS record.

  • Nobody has ever disputed that you could run a fully recursive cache on your workstation, only that any ordinary user ever does.

    You can see at this point how hollow "DNSSEC" is as an answer to the problem of this thread.