I just spent the better half of an hour to debug unbound and the pihole because I thought it's a me problem...

Good news though, if you add domain-insecure: "de" to your unbound config everything works fine

V__ 4 hours ago | parent | next [-]

Just before the outage happened I updated multiple client servers. That was a very stressfull hour trying to figure out why nothing works.

Bender 5 hours ago | parent | prev | next [-]

I don't even enable DNSSEC in Unbound. There just isn't enough adoption yet for me to feel like I am missing out on something, yet.

"Cloudflare Radar data shows 8.11% of domains are signed with DNSSEC, but only 0.47% of queries are validated end-to-end." [1]

Zones I may care about:

- Amazon.com: unsigned

- My banks: unsigned

- Hacker News: unsigned

- Email that I do not host: unsigned

- My power companies billing: unsigned

- I found some! id.me and irs.gov are signed.

	▲	tptacek an hour ago \| parent [-]
		The Tranco list is an academic research project to generate a "top N zones" list. Here's the portion of the top 1000 that is signed: https://dnssecmenot.fly.dev/

victorbjorklund 5 hours ago | parent | prev | next [-]

Same haha

SAMEEEEE !!!