dnssec-enable and dnssec-validation ARM documentation
Based on the 9.13.2 version of the ARM, it says that dnssec-enable
is required to be set to yes
for DNSSEC validation to occur.
This does not appear to be the case (seen on my own resolver running version: BIND 9.13.2 (Development Release) <id:4f6ef2f3e5>
, verified by @michal).
It also says that the default value of dnssec-validation
is yes
, but I understand that it is now actually auto
.