22.03.19 18:08 - Andrei Borzenkov:
22.03.2019 18:57, Hagen Buliwyf пишет:
In order to learn more about DNS, DNSSEC, ... i'm playing around with DNSMASQ (openSUSE Leap 15.0, KDE, NetworkManager) as a local DNS-Server (no DHCP).
It works fine so far. However, although dnssec is enabled in dnsmasq.conf the log shows that only 12% of all queries return an IP validated as SECURE.
Why do you think it has anything to do with dnsmasq?
Sorry, i just start to learn on this and was wondering if my configuration might need more tweaking or even some corrections.
Queries for opensuse.pool.ntp.org, de.pool.ntp.org, opensuse.org or my NetBankingSite return IPs validated as INSECURE.
So they do not sign their records.
Isn't DNSSEC a plus in security ?
Thank you very much for the link! Regards Hagen -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org