[Pdns-users] Unable to resolve domain when using DO and not AD

[Brian Candler]

On 12/12/2018 18:53, Luca Lesinigo wrote:
> - or can I configure pdns-recursor to selectively turn off DNSSEC for 
> a single domain / regex?
>
Negative Trust Anchor.

https://doc.powerdns.com/recursor/dnssec.html#negative-trust-anchors

(Yes, it's one line of LUA to configure - or you can just use 
rec_control add-nta to try it out)