Which of the above tests do you mean - number nine? Your provider supports DNSSEC but the counterparty - one specific Web page has a problem with implementing I think.
Test multiple Web pages, each time there will be a different result.
No, I have forwarding turned off in the dns tab of foris, so all dns requests should be handles by the omnia.
And dont be ridiculous, isp’s in my country doing dnssec? As if…
But foris claims i have dnssec, but the test of your topmost link, the grc one, claims i don’t.
grc mis-detects Knot Resolver. I suspect they watch for DO flag even on provably unsigned zones… there’s not much use to do that, but versions >= 4.0.0 do that now so we’ll see what grc says then (they’ll be coming to Omnia very soon, as there are CVEs fixed in today’s release).
Now the GRC test does detect DNSSEC validation on my Omnia, so that theory was probably right. I can’t see that from the images in the preceding post, but that’s not really important.
