Bug#679828: libc6: No easy way of enabling DNSSEC validation aka RES_USE_DNSSEC
An update:
Now it would make sense to be able to add a DO-bit, via /etc/resolv.conf:
https://developers.google.com/speed/public-dns/faq#dnssec
It would also be interesting if the AD-bit could be set, in accordance
with http://tools.ietf.org/html/rfc6840#section-5.7
Some good inspiration can be found on this ancient page:
http://bd.hauke-lampe.de/dnssec/adding-res_use_dnssec-to-glibc.html
I am very much in favor for these enhancements.
--
Marco
Reply to: