Ubuntu
network-manager package

  1. Bug #995332
  2. Comment #5

Comment 5 for bug 995332

Revision history for this message
Nicolas Delvaux (malizor) wrote :

On Wily, I edited /etc/dnsmasq.d/network-manager and added the following lines:

# DNSSEC setup
dnssec
trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
dnssec-check-unsigned

I then restarted network-manager and tried to connect to http://www.dnssec-failed.org/.
As expected, the site does not load (it is deliberately configured to fail DNSSEC validation).
But when reloading the page multiple-time, it is sometime displayed! I don't understand why.