Is it important to configure the DNSSEC trust-anchor for an instance
of 'unbound' running on an exit node? I put a lot of work into
setting up a new exit and want to take a break, but just noticed this
item. 'unbound' was built from source rather than installed from a
distribution, so this step mu
Spent a few minutes activating the DNSSEC trust-anchor for 'unbound'.
Ran 'dig' on a few signed domains and observed that queries that took
under 50 milliseconds without went to 2000 milliseconds with.
My attitude toward DNSSEC has deteriorated steadily over time and this
finishes it off for me.
