Hacker News new | ask | show | jobs
by wlonkly 1121 days ago
A nit, but the resolver, not the client, validates DNSSEC. The client/stub resolver trusts its local resolver. That always struck me as weird.