From owner-freebsd-questions@freebsd.org Mon Oct 9 00:09:01 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7566BE4388C for ; Mon, 9 Oct 2017 00:09:01 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: from mail-it0-x22a.google.com (mail-it0-x22a.google.com [IPv6:2607:f8b0:4001:c0b::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E82937235C for ; Mon, 9 Oct 2017 00:09:00 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: by mail-it0-x22a.google.com with SMTP id n195so6662937itg.1 for ; Sun, 08 Oct 2017 17:09:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=message-id:date:from:user-agent:mime-version:to:subject :content-transfer-encoding; bh=980oQpygbOwF/XiqaADQUEfTTQsLQC3UobX7zzHypHU=; b=TKab+CUg0gW5QFP+vt9bzFRQWHkmFKrPqYW5fREEkQiVTGLEMdlxqxSQSzYG0A3xrD krSBOAJXEHckCZkcT8HCOzRE9b/f/hLPcInvlJKRN+PxUN/eA6kOJCYPBMIyOf12wJKm 0agZHNWGiZYQhuE/A4doOq8QwlO2dq8xQd07hoCiqpXGAnnHvs6nOJKv8hlzS/bGMcrP NC9ZtWEd/AAQUY5JMOGwl91TnItErpGQCYveNqrIm4K3GiiyrMO3ZPaJGF3mQkGojd0I mXJOxfJbrW/oeQt7pX3ykXlzODw9rWjefz/2d2vXG6/Tkf1YtoxlQFavnCY6uy0UEZy5 G7cg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:content-transfer-encoding; bh=980oQpygbOwF/XiqaADQUEfTTQsLQC3UobX7zzHypHU=; b=LYCQmrCJdRrX599zl5851WnGXVA0V2HENBhZf13Z+ITscfaJdJUIGN+enWx/SFfR8w DdjP6K9OO3WlIw76LROluZuFfyMzgeSOmRo78qexbARM3YLVfrYqa32hCeFrVi5LcOqe n1quRMO1QdqvtZxjkByiXvi3rQQrC6gkFmhvcchr8n6RIdL+Kj2OKMVfoGzluvod9ZW3 92pjjxtvipzj7mbATzYRiBoxgAvkpo4RXsXlEMxhhqO59y/kvfrbqSyBfGB4YM0eUoZb qNm+hv/lvl3HqutGBQoiazYZAkLIep/Svbi4BEYQhxZS2UcmWDumddjp5yEQWqD2B9sJ C/rg== X-Gm-Message-State: AMCzsaVX0HEOgZdhG8VCw+VRlLn114nXbyD5KETVDyAWXEV2V7rHMDwh lQeeDQynQtuudM7v8Qo2pj6ve0HG X-Google-Smtp-Source: AOwi7QBZj7NkPAYAK/CC5lwlONEEptuEp0CbKdScNDoe+2dVxKyFdxqSpcSu5dJMZVz3PPCL6Kduqw== X-Received: by 10.36.250.139 with SMTP id v133mr3012063ith.13.1507507740112; Sun, 08 Oct 2017 17:09:00 -0700 (PDT) Received: from [10.0.10.3] (cpe-65-25-55-192.neo.res.rr.com. [65.25.55.192]) by smtp.googlemail.com with ESMTPSA id m7sm3049991ita.2.2017.10.08.17.08.59 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 08 Oct 2017 17:08:59 -0700 (PDT) Message-ID: <59DABE19.2070704@gmail.com> Date: Sun, 08 Oct 2017 20:08:57 -0400 From: Ernie Luzar User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: "freebsd-questions@freebsd.org" Subject: unbound trust-anchor Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Oct 2017 00:09:01 -0000 If I comprehend the unbound-anchor man page correctly, at unbound start time a trust-anchor is fetched from a unbound website. This is required for dnssec. Is this really necessary. I do not like any software application to be dialing home. Way to easy for that website to become compromised and bad things happen to my host. Can unbound function without this dial home feature? How would I go about disabling it.