[systemd-devel] systemd prerelease 243-rc1

[Stefan Tatschner]

On Wed, 2019-07-31 at 13:47 +0200, Lennart Poettering wrote:
> > What is this “strict” mode exactly?
> 
> It just means resolved will insist on DNS-over-TLS to talk to the
> configured DNS servers, instead of trying to use it and falling back
> automatically if it's not available.

Ahh. Thanks for the explanation. I was just wondering if certificate
checks have been implemented. IIRC resolved does not check/validate the
certificate (chain) of the DNS server.

S