[PING] Re: DNSSEC support in stub-resolver

[Ondřej Bílka]

On Fri, May 16, 2014 at 06:22:35AM +0530, Siddhesh Poyarekar wrote:
> On Thu, May 15, 2014 at 11:32:46PM +0200, Ondřej Bílka wrote:
> > I would start with simpler steps first, a huge patch for  What about adding configure
> > option/env variable to only trust localhost resolvers.
> 
> The localhost resolver must be implicitly trusted, so there's no point
> in adding an option to enable or disable that.  Maybe you meant 'add
> an option to trust the configured resolvers'?  Then that is
> essentially what Petr is proposing.
> 
> Siddhesh

No, by default we trust everything. I proposed option to trust localhost
and distrust everything else. I do not see yet need for configure
options beyond that.