17 lines
541 B
ReStructuredText
17 lines
541 B
ReStructuredText
.. SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
.. _dnssec-config:
|
|
|
|
*************************
|
|
DNSSEC, data verification
|
|
*************************
|
|
|
|
Good news! Knot Resolver uses secure configuration by default, and this configuration
|
|
should not be changed unless absolutely necessary, so feel free to skip over this section.
|
|
|
|
.. include:: ../daemon/lua/trust_anchors.rst
|
|
|
|
DNSSEC is main technology to protect data, but it is also possible to change how strictly
|
|
resolver checks data from insecure DNS zones:
|
|
|
|
.. include:: ../lib/layer/mode.rst
|