* Michael Cronenworth:
Hi,
Is there any project or team involved with improving encrypted DNS
support in Fedora? Any movement in Red Hat corporate?
- Glibc team?
The /etc/resolv.conf file needs some love. AFAIK it still does not
verify DNSSEC.
We are not going to implement this directly in glibc. You should talk
to a stub resolver on 127.0.0.1 instead. We do not want to link a
cryptographic library into every process that queries an Internet host
name. That also applies to DNSSEC.
Thanks,
Florian