From: Tomas Krizek <tomas.krizek@nic.cz>
Date: Tue, 14 Jan 2020 13:26:12 +0000 (+0100)
Subject: etc/config: remove snippet for disabling dnssec
X-Git-Tag: v5.0.0~3^2~24
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=37c775f189c0029cd5ac55e5449a040a806a4537;p=thirdparty%2Fknot-resolver.git

etc/config: remove snippet for disabling dnssec
---

diff --git a/etc/config/config.cluster b/etc/config/config.cluster
index 33e0fe3cf..1fbc0b84d 100644
--- a/etc/config/config.cluster
+++ b/etc/config/config.cluster
@@ -11,9 +11,6 @@ net.listen('::1', 53, { kind = 'dns'})
 net.listen('127.0.0.1', 853, { kind = 'tls' })
 net.listen('::1', 853, { kind = 'tls' })
 
--- To disable DNSSEC validation, uncomment the following line (not recommended)
--- trust_anchors.remove('.')
-
 -- Large cache size, so we don't need to flush ever
 -- This can be larger than available RAM, least frequently accessed
 -- records will be paged out as long as there's enough disk space to back it
diff --git a/etc/config/config.docker b/etc/config/config.docker
index 9199880fc..c8324ca77 100644
--- a/etc/config/config.docker
+++ b/etc/config/config.docker
@@ -7,9 +7,6 @@ net.listen('0.0.0.0', 853, { kind = 'tls' })
 net.listen('0.0.0.0', 443, { kind = 'doh' })
 net.listen('0.0.0.0', 8453, { kind = 'webmgmt' })
 
--- To disable DNSSEC validation, uncomment the following line (not recommended)
--- trust_anchors.remove('.')
-
 -- Load Useful modules
 modules = {
 	'stats',    -- Track internal statistics
diff --git a/etc/config/config.personal b/etc/config/config.personal
index 31d58d246..ba4ddc101 100644
--- a/etc/config/config.personal
+++ b/etc/config/config.personal
@@ -7,9 +7,6 @@ net.listen('::1', 53, { kind = 'dns'})
 net.listen('127.0.0.1', 853, { kind = 'tls' })
 net.listen('::1', 853, { kind = 'tls' })
 
--- To disable DNSSEC validation, uncomment the following line (not recommended)
--- trust_anchors.remove('.')
-
 -- Load useful modules
 modules = {
 	'hints > iterate',  -- Load /etc/hosts and allow custom root hints
diff --git a/etc/config/config.splitview b/etc/config/config.splitview
index 2fd2415b4..04b47edb6 100644
--- a/etc/config/config.splitview
+++ b/etc/config/config.splitview
@@ -8,9 +8,6 @@ net.listen('::1', 53, { kind = 'dns'})
 net.listen('127.0.0.1', 853, { kind = 'tls' })
 net.listen('::1', 853, { kind = 'tls' })
 
--- To disable DNSSEC validation, uncomment the following line (not recommended)
--- trust_anchors.remove('.')
-
 -- Load Useful modules
 modules = {
 	'hints > iterate', -- Load /etc/hosts and allow custom root hints