Support DNSSEC

Submitted by -
Status: New Idea

Most likely the best support and codebase to base it on would be unbound or powerdns-recursor, not dnsmasq.