File

net.resolvers.basic: Add opt-out argument for DNSSEC security status This makes explicit which lookups can accept an unsigned response. Insecure (unsigned, as before DNSSEC) A and AAAA records can be used as security would come from TLS, but an insecure TLSA record is worthless.

return {
  _all = {
  },
  default = {
    ["exclude-tags"] = "mod_bosh,storage,SLOW";
  };
  bosh = {
    tags = "mod_bosh";
  };
  storage = {
    tags = "storage";
  };
}