On 11/4/19 2:17 PM, Florian Weimer wrote:
We are not going to implement this directly in glibc. You should
talk
to a stub resolver on 127.0.0.1 instead. We do not want to link a
cryptographic library into every process that queries an Internet host
name. That also applies to DNSSEC.
The transition to DoT/DoH makes the resolv.conf file obsolete. Any discussion on
removing it entirely? Default to looking at a local resolver.