From: Jakub Czajka <jakub@ekhem.eu.org>
Date: Sun, 23 Mar 2025 17:07:42 +0000 (+0100)
Subject: [dns] Require DNSSEC.
X-Git-Url: https://git.ekhem.eu.org/?a=commitdiff_plain;h=ef5de92e030e7de799ea149b8a794bf662461681;p=server.git

[dns] Require DNSSEC.
---

diff --git a/dnscrypt-proxy/dnscrypt-proxy.toml b/dnscrypt-proxy/dnscrypt-proxy.toml
index 46a17f2..b0f880d 100644
--- a/dnscrypt-proxy/dnscrypt-proxy.toml
+++ b/dnscrypt-proxy/dnscrypt-proxy.toml
@@ -78,7 +78,7 @@ odoh_servers = false
 ## Require servers defined by remote sources to satisfy specific properties
 
 # Server must support DNS security extensions (DNSSEC)
-require_dnssec = false
+require_dnssec = true
 
 # Server must not log user queries (declarative)
 require_nolog = true