Hi George There may be a bug in the code that attaches EDE codes for DNSSEC validation failures to the SERVFAIL answers
I've created an unbound issue here: https://github.com/NLnetLabs/unbound/issues/873 Apparently, the EDE codes aren't always present, extensive log and pcap file data available in the pi-hole topic (https://discourse.pi-hole.net/t/dnssec-discussion-support-for-proxy-dnssec/62217/21) can you please have a look Thanks
