On a way to #fosdem I have found #DNSSEC doesn't work on any captive portal I have met. We need to have some support for captive portals in #dnsconfd, but also dnssec-trigger functionality would be needed.

Na návštěvě #csnog jsem musel vypnout #dnssec validaci, abych se dostal na WiFi. Trochu zamrzí, že zrovna na setkání síťařů to je potřeba. Chyběl funkční dnssec-trigger. Snad příští rok už to bude umět #dnsconfd automaticky zjistit.

@danimo @darix @thomic yes, except for Dnsmasq, other resolvers lack integration with NetworkManager. We made #dnsconfd project provide it, but it integrates only with #unbound at the moment. This seems good for static entries, not sure for dynamic content.

Work on #dnsconfd progresses slower than we expected. Still is waiting for DoT support. But basic functionality is already there.

Improved today #dnsconfd to start even with SELinux, configure #unbound forwarders and have working #dns resolution. Still quite early, but once merged, I think ready to land into #Fedora #Rawhide.

@letoams @davidnewman I fully agree. The code is fixable, but it's maintainers are not. That's why we started #dnsconfd, which would have talk on Fosdem.

Just posted #dnsconfd talk proposal to #fosdem #dns room. Well, a lot work needs to be done first.