coredns/unbound

For non-edns0 DO bit request filter DNSSEC record

Closed this issue · 0 comments

miekg commented

If a request does not set the DO bit we should filter out the RRSIGs (and probably NSEC/NSEC3)