Mullvad DNS - no DNSSEC validation?

n3t_admin

Just as the title says. I was experimenting with different upstream DNS providers and Mullvad came to mind, since they have a pretty good reputation.
However, I can't seem to find which of their servers (preferably DoH) have DNSSEC Validation support.
I also don't get get the ad flag when running dig. On all of their different servers.

Am I missing something or do they actually lack DNSSEC support?

Sigismund

n3t_admin the ad flag if not using +short confirms dnssec validation. I mean if it shows in response header it confirms that DNS response was dnssec validated.

So it looks like any server you tried from them have dnssec support.

Edit: or you could use "+dnssec" in your query to validate it further.

n3t_admin

Sigismund the same request for Quad9 (which do have DNSSEC 100%) shows ad flag. I am starting to believe they don't actually support DNSSEC validation :/

Sigismund

n3t_admin sorry missread the last part. If using +dnssec is not returning the right output then yeah they don't. Sadly I can't modify my previous reply..