etc/config: remove snippet for disabling dnssec

diff --git a/etc/config/config.cluster b/etc/config/config.cluster
index 33e0fe3cfe0dda4625341049d1bae2852be7f3bc..1fbc0b84dbdf91e7e3aaf0da244153a5f86531b4 100644 (file)
--- a/etc/config/config.cluster
+++ b/etc/config/config.cluster
@@ -11,9 +11,6 @@ net.listen('::1', 53, { kind = 'dns'})
 net.listen('127.0.0.1', 853, { kind = 'tls' })
 net.listen('::1', 853, { kind = 'tls' })
 
--- To disable DNSSEC validation, uncomment the following line (not recommended)
--- trust_anchors.remove('.')
-
 -- Large cache size, so we don't need to flush ever
 -- This can be larger than available RAM, least frequently accessed
 -- records will be paged out as long as there's enough disk space to back it

diff --git a/etc/config/config.docker b/etc/config/config.docker
index 9199880fc03a79dcfe2f5a905d5b3a270ab62ba0..c8324ca77a4e1a4c4eb9f220565304fe8e24e6b4 100644 (file)
--- a/etc/config/config.docker
+++ b/etc/config/config.docker
@@ -7,9 +7,6 @@ net.listen('0.0.0.0', 853, { kind = 'tls' })
 net.listen('0.0.0.0', 443, { kind = 'doh' })
 net.listen('0.0.0.0', 8453, { kind = 'webmgmt' })
 
--- To disable DNSSEC validation, uncomment the following line (not recommended)
--- trust_anchors.remove('.')
-
 -- Load Useful modules
 modules = {
        'stats',    -- Track internal statistics

diff --git a/etc/config/config.personal b/etc/config/config.personal
index 31d58d246a166cfe3875af29693aad94685bafe2..ba4ddc1017ebd9b59c8fe58895d36950a48d536f 100644 (file)
--- a/etc/config/config.personal
+++ b/etc/config/config.personal
@@ -7,9 +7,6 @@ net.listen('::1', 53, { kind = 'dns'})
 net.listen('127.0.0.1', 853, { kind = 'tls' })
 net.listen('::1', 853, { kind = 'tls' })
 
--- To disable DNSSEC validation, uncomment the following line (not recommended)
--- trust_anchors.remove('.')
-
 -- Load useful modules
 modules = {
        'hints > iterate',  -- Load /etc/hosts and allow custom root hints

diff --git a/etc/config/config.splitview b/etc/config/config.splitview
index 2fd2415b4fb5f571742f8827dbd68516565da3cb..04b47edb6e671dc54862de0fd79904009d12c8bf 100644 (file)
--- a/etc/config/config.splitview
+++ b/etc/config/config.splitview
@@ -8,9 +8,6 @@ net.listen('::1', 53, { kind = 'dns'})
 net.listen('127.0.0.1', 853, { kind = 'tls' })
 net.listen('::1', 853, { kind = 'tls' })
 
--- To disable DNSSEC validation, uncomment the following line (not recommended)
--- trust_anchors.remove('.')
-
 -- Load Useful modules
 modules = {
        'hints > iterate', -- Load /etc/hosts and allow custom root hints