Merge pull request pi-hole#847 from pi-hole/tweak/dnssec-warning

Expand upon DNSSEC warning
bweave · Sep 17, 2018 · a87d4e9 · a87d4e9
2 parents aea7d1a + 400e416
commit a87d4e9
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/settings.php b/settings.php
@@ -834,8 +834,11 @@ function convertseconds($argument)
                                                 </div>
                                                 <p>Validate DNS replies and cache DNSSEC data. When forwarding DNS
                                                    queries, Pi-hole requests the DNSSEC records needed to validate
-                                                   the replies. Use Google, Norton, DNS.WATCH or Quad9 DNS servers when activating
-                                                   DNSSEC. Note that the size of your log might increase significantly
+                                                   the replies. If a domain fails validation or the upstream does not
+                                                   support DNSSEC, this setting can cause issues resolving domains.
+                                                   Use Google, Norton, DNS.WATCH, Quad9, or another DNS
+                                                   server which supports DNSSEC when activating DNSSEC. Note that
+                                                   the size of your log might increase significantly
                                                    when enabling DNSSEC. A DNSSEC resolver test can be found
                                                    <a href="http://dnssec.vs.uni-due.de/" target="_blank">here</a>.</p>
                                                 <label>Conditional Forwarding</label>