Raito Bezarius 4f461f7b77 nixos/modules/system/resolved: disable DNSSEC validation by default ... Historically, we allowed downgrade of DNSSEC, but some folks argue this may decrease actually the security posture to do opportunistic DNSSEC. In addition, the current implementation of (opportunistic) DNSSEC validation is broken against "in the wild" servers which are usually slightly non-compliant. systemd upstream recommended to me (in personal communication surrounding the All Systems Go 2023 conference) to disable DNSSEC validation until they work on it in a significant capacity, ideally, by next year.		2023-09-13 11:49:16 +02:00
..
activation	nixos/stc: Improve mount unit handling	2023-08-21 09:07:14 +02:00
boot	nixos/modules/system/resolved: disable DNSSEC validation by default	2023-09-13 11:49:16 +02:00
etc	nixos/etc: keep directories in derivation name	2023-06-07 00:08:43 +02:00
build.nix	treewide: automatically md-convert option descriptions	2022-07-30 15:16:34 +02:00