These are chat archives for CZ-NIC/knot-resolver

11th
Oct 2018
Vladimír Čunát
@vcunat
Oct 11 2018 09:11
policy.suffix always matches whole subtrees, i.e. uu will match anything ending in .uu (and uu by itself as well).
edoo
@ookangzheng
Oct 11 2018 12:58
can knot-resolver unload DNSSEC?
edoo
@ookangzheng
Oct 11 2018 13:11
like modules.unload(‘dnssec')
Vladimír Čunát
@vcunat
Oct 11 2018 13:26
If you don't enable it, validation won't be done, unless a packaging configured a default for the TA file. trust_anchors.negative = { '.' } should work, but we don't focus on the validation-less scenario at all.