DNSSEC validation default in systemd‑resolved on Arch Linux: an unresolved decision
Goal Investigate whether systemd‑resolved should enable DNSSEC validation by default on Arch Linux, given the trade‑off between security and compatibility with public DNS providers. Constraints and Uncertainty The shipped /etc/systemd/resolved.conf sets DNSSEC=no . Enabling DNSSEC can cause resolution failures for domains served by providers that do not publ