[getdns-users] where is the "ad" bit?

A. Schulze sca at andreasschulze.de
Wed Jul 5 17:41:06 UTC 2017


Hello,

I try to replace a validating unbound-resolver with stubby (DNS-via-TLS to this unbound-resolver) and found dnssec validation differences.

how should I configure stubby to make
"dig @stubby  dnssec-failed.org." return SERVFAIL and "dig @stubby getdnsapi.net." return data with AD bit set?

Andreas



More information about the Users mailing list