do EDNS over TCP/IP as well so we can actually get DNSSEC signatures. In 2016.

diff --git a/pdns/lwres.cc b/pdns/lwres.cc
index 758296f8d01b7af12c7ad3cb4f4742cb61af5790..fa2ee83fdb337b083f8cbb8be8410bf90343a142 100644 (file)
--- a/pdns/lwres.cc
+++ b/pdns/lwres.cc
@@ -79,7 +79,7 @@ int asyncresolve(const ComboAddress& ip, const DNSName& domain, int type, bool d
 
   string ping;
   bool weWantEDNSSubnet=false;
-  if(EDNS0Level && !doTCP) {
+  if(EDNS0Level) { 
     DNSPacketWriter::optvect_t opts;
     if(srcmask) {
       EDNSSubnetOpts eo;