13 points frostbyte7 17 hours ago 2 comments
mariofdistrust 16 hours ago | parent
my mobile network carrier blocks quad9
eqvinox 3 hours ago | parent
The point of running a local unbound is indeed to turn on DNSsec validation. After that, it's the domains' fault for not using DNSsec. But at least your own stuff won't be tampered with, because you use DNSsec on your own domains, right? Right?
:-(
Coincidentally, a bunch of free wifi stuff blocks the root key queries unbound does at startup, resulting in nothing working until you get those records in there somehow (e.g. load_cache).