Does DNSSEC support exclude non-DNSSEC DNS servers?

[eddiez]

I use multiple DNS servers (8) to enhance DNS respons through the addition of 'ALL-SERVERS' in the dnsmasq conf file. I also have enabled DNSSEC support. But does enabling this support only allow DNSSEC servers and excludes all other non-DNSSEC DNS servers?

 

[RMerlin]

dnssec makes no sense if it's not supported by all of your servers. It means that an invalid DNS response would still slip through if it came from one of the DNS servers that do not support DNSSEC. Kinda like having a door lock on the front door, and an open window right next to it...

 

[eddiez]

Good point What was I thinking...