Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.


A trust anchor is also required for DNSSEC validation. 

getdns version 1.2 includes and later include support for automatic trust anchor management - see 'Zero configuration DNSSEC' which will automatically fetch a trust anchor is if none is present on the system. See that link See 'Zero configuration DNSSEC'  (and below) for the specific details of key management for DNSSEC for this case


If using a version of getdns earlier than 1.2 then a trust anchor must be manually installed and managed on the system. We recommend using unbound-anchor.