pihole-unbound-hyperlocal/etc-dnsmasq.d/10-pihole-extra.conf

# https://thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html
# Copy the DNSSEC Authenticated Data bit from upstream servers to downstream clients. 
# This is an alternative to having dnsmasq validate DNSSEC, 
# but it depends on the security of the network between dnsmasq and the upstream servers, 
# and the trustworthiness of the upstream servers.
proxy-dnssec
first commit 2023-05-04 01:33:01 +02:00			`# https://thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html`
			`# Copy the DNSSEC Authenticated Data bit from upstream servers to downstream clients.`
			`# This is an alternative to having dnsmasq validate DNSSEC,`
			`# but it depends on the security of the network between dnsmasq and the upstream servers,`
			`# and the trustworthiness of the upstream servers.`
reactivated dnsmasq cache 2023-05-04 01:33:02 +02:00			`proxy-dnssec`