Are you using CNAME Flattening?

Questions
1

I know it’s an option in NextDNS and uBlock Origin, for example.

But for instance, GitHub - yokoffing/NextDNS-Config: Setup guide for NextDNS, a DoH proxy with advanced capabilities asks you to disable it. I haven’t noticed any downsides to it myself, though.

I’m asking because it reduces a lot of DNS queries… But it’s hard to find out what the downsides are.

  • Yes
  • No
0 voters
2

I believe it breaks DNSSEC validation.

1 Like
3

Got it. Thanks for the info, I’m turning it off, and the poll was over after the first reply anyway.