Add more DNSSEC warnings.

Signed-off-by: Mark Drobnak <mark.drobnak@gmail.com>
This commit is contained in:
Mark Drobnak
2018-09-17 11:35:52 -04:00
committed by GitHub
parent e7e9392d53
commit 9743da7b96
+3 -1
View File
@@ -834,7 +834,9 @@ if (isset($_GET['tab']) && in_array($_GET['tab'], array("sysadmin", "blocklists"
</div>
<p>Validate DNS replies and cache DNSSEC data. When forwarding DNS
queries, Pi-hole requests the DNSSEC records needed to validate
the replies. Use Google, Norton, DNS.WATCH, Quad9, or another DNS
the replies. If a domain fails validation or the upstream does
support DNSSEC, this setting can cause issues resolving domains.
Use Google, Norton, DNS.WATCH, Quad9, or another DNS
server which supports DNSSEC when activating DNSSEC. Note that
the size of your log might increase significantly
when enabling DNSSEC. A DNSSEC resolver test can be found