Bryan Steele :flan_beard: brynet@bsd.network

#OpenBSD now implements RFC 6840 (AD flag processing) if using trusted name servers (by default for localhost, e.g: unwind(8)/unbound(8)).

New RES_TRUSTAD and "options trust-ad" resolv.conf(5) support added to OpenBSD's libc asr implementation.

Full commit msg: https://marc.info/?l=openbsd-cvs&m=163761230920719&w=2

#DNSSEC #DNS