I still think Nick's clue is promising, let's see what the results of his tests will be.
There could be more than one thing causing DANE not to work. If enabling DNSSEC in systemd-resolved makes it work we'll try to figure out why it doesn't work with unbound-resolvconf.
I still think Nick's clue is promising, let's see what the results of his tests will be.
There could be more than one thing causing DANE not to work. If enabling DNSSEC in systemd-resolved makes it work we'll try to figure out why it doesn't work with unbound-resolvconf.