]> git.ipfire.org Git - thirdparty/systemd.git/blobdiff - man/resolved.conf.xml
Merge pull request #30480 from keszybz/kernel-install-more-paths
[thirdparty/systemd.git] / man / resolved.conf.xml
index 084256cf05da258b2bab0d7745c642c86ba79f6a..95b35537d67700829f08e65291d438de618e0231 100644 (file)
         downgrade to non-DNSSEC mode by synthesizing a DNS response that suggests DNSSEC was not
         supported.</para>
 
-        <para>If set to false, DNS lookups are not DNSSEC validated. In this mode, or when set to
-        <literal>allow-downgrade</literal> and the downgrade has happened, the resolver becomes
-        security-unaware and all forwarded queries have DNSSEC OK (DO) bit unset.</para>
+        <para>If set to false, DNS lookups are not DNSSEC validated.</para>
 
         <para>Note that DNSSEC validation requires retrieval of additional DNS data, and thus results in a
         small DNS lookup time penalty.</para>