> Do you think there's any chance to solve this correctly without
> switching from dnsmasq to Unbound or the like?
I don't think this is going to be possible.
BTW, AVM seem to have DNSSEC validation on (at least) their 7390 [1].
As somebody with a lot of clout, such as you have at c't :-), I would
contact them and politely request they quickly start signing their
myfritz platform. Chances are they might even do that. ;-)
-JP
[1] https://twitter.com/marcodavids/status/649861646232485888
_______________________________________________
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
