| 10 Jul 2025 |
hexa | different question … what is the least awful way to make sure a consumer of a module I'm providing uses a DNSSEC validating resolver? | 14:21:04 |
hexa | given that the resolver can be on the local machine (preferable) or not this seems a bit difficult to assert on 🤪 | 14:22:50 |
emily | seems like not really something you can detect before runtime | 14:23:05 |
Sandro 🐧 | within reason probably not at all | 14:23:10 |
hexa | so I'm wondering what the right approximation would be | 14:23:11 |
Sandro 🐧 | You could check if kresd is used with dnssec checks on | 14:23:24 |
emily | I would just do nothing or have services.X.yesIPromiseImUsingDNSSec | 14:23:25 |