* Andrew Lutomirski: > Paul may well have been mixing different things here, but I don't > think you answered the one that seems like the most severe problem: > systemd-resolved removed perfectly valid DNSSEC records that were > supplied by the upstream server. One might reasonably debate whether > Fedora's default DNS resolver configuration should validate DNSSEC, > but I think it should honor the DO bit in client requests and return > DNSSEC data. FWIW, this is <https://bugzilla.redhat.com/show_bug.cgi?id=1879028>. Thanks, Florian -- Red Hat GmbH, https://de.redhat.com/ , Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243, Managing Directors: Charles Cachera, Brian Klemm, Laurie Krebs, Michael O'Neill _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx