unbound: Implement setting qname minimisation into strict mode

[ipfire-2.x.git] / config / unbound / unbound.conf

diff --git a/config/unbound/unbound.conf b/config/unbound/unbound.conf
index 755eac9af89739e1131a599fc315de1b785f8af0..ce51f63a0042d72a73cb0192826b1ed7b0fff05d 100644 (file)
--- a/config/unbound/unbound.conf
+++ b/config/unbound/unbound.conf
@@ -61,6 +61,7 @@ server:
        harden-algo-downgrade: no
        use-caps-for-id: yes
        aggressive-nsec: yes
+       qname-minimisation: yes
 
        # TLS
        tls-cert-bundle: /etc/ssl/certs/ca-bundle.crt