Hacker News new | ask | show | jobs
by oliao 4523 days ago
Does anybody know if it is the browser or the operating system that checks the validity of the dns records? Is it enabled on all clients?
2 comments

No, but Google's public resolvers¹ support it and it's very easy to set up your own local validating resolver like Unbound².

¹ https://developers.google.com/speed/public-dns/docs/using#se...

² https://unbound.net/

You can track the progress of DNSSEC validation in Debian at https://wiki.debian.org/DNSSEC