mirror of
https://github.com/pi-hole/dnsmasq.git
synced 2025-12-19 10:18:25 +00:00
ee4158678a
This allows us to query for the root zone DNSKEY RRset and validate it, thus automatically handling KSK rollover.
10 lines
301 B
Plaintext
10 lines
301 B
Plaintext
# The root DNSSEC trust anchor, valid as at 30/01/2014
|
|
|
|
# Note that this is a DS record (ie a hash of the root Zone Signing Key)
|
|
# If was downloaded from https://data.iana.org/root-anchors/root-anchors.xml
|
|
|
|
trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
|
|
|
|
|
|
|