Merge pull request #1877 from pi-hole/tweak/dnssec_default

DNSSEC validation should not be enabled by default in v6
pi-hole · Feb 9, 2024 · 82f8abe · 82f8abe
2 parents 94521b8 + 16cc102
commit 82f8abe
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/config/config.c b/src/config/config.c
@@ -497,7 +497,7 @@ void initConfig(struct config *conf)
 	conf->dns.dnssec.h = "Validate DNS replies using DNSSEC?";
 	conf->dns.dnssec.t = CONF_BOOL;
 	conf->dns.dnssec.f = FLAG_RESTART_FTL;
-	conf->dns.dnssec.d.b = true;
+	conf->dns.dnssec.d.b = false;
 
 	conf->dns.interface.k = "dns.interface";
 	conf->dns.interface.h = "Interface to use for DNS (see also dnsmasq.listening.mode) and DHCP (if enabled)";