Skip to content
  • Evan Hunt's avatar
    Set "dnssec-validation auto" by default · bef18eca
    Evan Hunt authored and Ondřej Surý's avatar Ondřej Surý committed
    - the default setting for dnssec-validation is now "auto", which
      activates DNSSEC validation using the IANA root key.  The old behavior
      can be restored by explicitly setting "dnssec-validation yes", which
      "yes", which activates DNSSEC validation only if keys are explicitly
      configured in named.conf.
    - the ARM has been updated to describe the new behavior
    bef18eca