distro/kresd.no_ta.conf - mention how to turn off DNSSEC validation

diff --git a/distro/common/kresd.no_ta.conf b/distro/common/kresd.no_ta.conf
index 1377ce9f3c0e1fefcc4e994346b92498d7e9a6ee..2b79542a320d15a05971f6156065e0290bf797b1 100644 (file)
--- a/distro/common/kresd.no_ta.conf
+++ b/distro/common/kresd.no_ta.conf
@@ -13,5 +13,8 @@ modules = {
 -- Listen on localhost (default)
 -- net = { '127.0.0.1', '::1' }
 
+-- To disable DNSSEC validation, uncomment the following line (not recommended)
+-- trust_anchors.keyfile_default = nil
+
 -- Cache size
 cache.size = 100 * MB