24710c48ed16be5fa461fbb303a744a907541daf |
|
03-Dec-2015 |
Lennart Poettering <lennart@poettering.net> |
resolved: introduce a dnssec_mode setting per scope
The setting controls which kind of DNSSEC validation is done: none at
all, trusting the AD bit, or client-side validation.
For now, no validation is implemented, hence the setting doesn't do much
yet, except of toggling the CD bit in the generated messages if full
client-side validation is requested. |