DNSSEC verification is the responsibility of the DNS server, and not of the client side.  The DNS server the client connects to performs the actual recursive lookups and performs the DNSSEC validation, so yes, you need to make sure the DNS server you are using is trusted.

On 1/13/22 8:11 AM, Anant via c-ares wrote:
Hi,

Do we have support for DNSSEC in 1.18.1?

Iam exploring the src and see that there are some relevant changes in header files but I do not see that in query and answer handling.
Regards
Anant

-- 
c-ares mailing list
c-ares@lists.haxx.se
https://lists.haxx.se/listinfo/c-ares

Reply via email to