[Pkg-chromium-maint] Bug#694477: Bug#694477: chromium - Ignores AD bit (DNSSEC result) if resolver is not only 127.0.0.1

[Michael Gilbert]

control: forwarded -1 http://crbug.com/50874
control: severity -1 wishlist

On Mon, Nov 26, 2012 at 1:56 PM, Bastian Blank wrote:
> chromium ignores the AD bit in DNS responses if
> - more then one resolver,
> - resolver not 127.0.0.1.
>
> This makes the DNSSEC and DANE TLSA support pretty useless. Also it is
> the task for the user to make sure the responses are correct, not any
> tool in different ways.

I think this depends on DNSSEC support first.  Please see upstream
feature request.

Best wishes,
Mike