On 13/01/2014 15:55, Phil Mayers wrote: > If you want "hacky", how about an LD_PRELOAD library that patches the > resolver queries and enforces AD=1 ;o) > Oh hey, someone already did it: http://www.dnssec-tools.org/docs/tool-description/libval_shim.html