Answer by u1686_grawity for Is DNSSEC that commonly broken or is...
It's probably both. Overall, based on previous reports, I would lean towards the latter (systemd-resolved being too strict in some cases). However, according to DNSViz, the domains' configuration...
View ArticleIs DNSSEC that commonly broken or is systemd-resolved overzealous?
I've recently switched my DNS resolver to systemd-resolved in order to start taking advantage of DNSSEC where it is available. My config is:[Resolve]DNS=8.8.8.8 8.8.4.4DNSOverTLS=yes(including the...
View Article
