On Di, 14.04.20 12:57, Kevin Fenzi (kevin@xxxxxxxxx) wrote: > Can you expand on what that means? > > Does it mean: > > a) systemd-resolved will use DNS over TLS if it detects that > the nameservers it is querying can do so (ie, it would do a query to > port 853 of the nameservers dhcp or static config gave it) > > b) systemd-resolved will use DNS over TLS and always use some 'well > known' public dns servers for queries, ignoring locally configured > servers. Nah. We will only talk to configured DNS servers. If no DNS servers are configured at all we'll try to use a default set of DNS servers however, which can be specified when building systemd. it's a fallback to make things more robust, i.e. making sure DNS works if possible. Lennart -- Lennart Poettering, Berlin _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx