Maintained by: NLnet Labs

[Unbound-users] Ability to exclude a domain from DNSSEC validation?

Jan-Piet Mens
Wed Mar 7 08:47:34 CET 2012


> Hello, I am new to Unbound, and I was wondering if there is an easy
> way to exclude a particular domain from DNSSEC validation.

Use Unbound's "domain-insecure" option, which you add to unbound.conf or
add on-the-fly to the running server with `unbound-control'. (Note that
ading on-the-fly doesn't survive a server restart.)