[systemd-devel] systemd-resolved : How to change permanently to 127.0.0.54

[Laura Smith]

Sent with Proton Mail secure email.

On Monday, 23 December 2024 at 14:00, Kevin P. Fleming <lists.systemd-devel at kevin.km6g.us> wrote:

> The simplest fix is to set "DNSSEC=no" 

That seems to me to be a bit of a "sledgehammer to crack a nut".

The man page for resolved.conf says:

"It is recommended to set DNSSEC= to true on systems where it is known that the DNS server supports DNSSEC correctly "

I know that my DNS servers do, since they are all modern implementations which have no issues with DNSSEC support.

Also DNSSEC=no would also kill DANE which is not a desirable outcome ?