The change in question causes dnsmasq to always return SERVFAIL for
queries without the "use recursion" bit set.
The relevant quote in the reference
http://cs.unc.edu/~fabian/course_papers/cache_snooping.pdf
is this:
Recommendation 2: secondly, and most importantly, non-authoritative
requests
Dear list members,
I expect "dig +trace" to show a trace of the delegation path from the
root name servers for the name being looked up. This behavior is broken
since commit 087eb76140725f8f1892ba6f251ea052d3440966
