Skip to content

Commit

Permalink
DNSSEC validation should not be enabled by default - it wasn't in v5,…
Browse files Browse the repository at this point in the history
… either. The reason for this is that it may be causing issues on devices with broken/missing RTCs where NTP time synchronization relies on DNS resolution

Signed-off-by: DL6ER <[email protected]>
  • Loading branch information
DL6ER committed Feb 9, 2024
1 parent 94521b8 commit 16cc102
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/config/config.c
Original file line number Diff line number Diff line change
Expand Up @@ -497,7 +497,7 @@ void initConfig(struct config *conf)
conf->dns.dnssec.h = "Validate DNS replies using DNSSEC?";
conf->dns.dnssec.t = CONF_BOOL;
conf->dns.dnssec.f = FLAG_RESTART_FTL;
conf->dns.dnssec.d.b = true;
conf->dns.dnssec.d.b = false;

conf->dns.interface.k = "dns.interface";
conf->dns.interface.h = "Interface to use for DNS (see also dnsmasq.listening.mode) and DHCP (if enabled)";
Expand Down

0 comments on commit 16cc102

Please sign in to comment.