Merge pull request #1267 from HeliusMagnum/master

Update unbound.md DNSSEC Validation
This commit is contained in:
yubiuser
2025-07-14 19:36:31 +02:00
committed by GitHub

View File

@@ -169,10 +169,10 @@ You can test DNSSEC validation using
```bash
dig fail01.dnssec.works @127.0.0.1 -p 5335
dig dnssec.works @127.0.0.1 -p 5335
dig +ad dnssec.works @127.0.0.1 -p 5335
```
The first command should give a status report of `SERVFAIL` and no IP address. The second should give `NOERROR` plus an IP address.
The first command should give a status report of `SERVFAIL` and no IP address. The second should give `NOERROR` plus an IP address in addition to a `ad` in the `flags:` section. The `ad` signifies (Authentic Data), indicating the DNS response has been authenticated and validated using DNSSEC.
### Configure Pi-hole