[Dnsmasq-discuss] dnscrypt -dnssec problems

[wkitty42 at gmail.com]

On 05/25/2016 03:24 PM, Johnny Appleseed wrote:
> dig +dnssec wikipedia.org
> ;; Truncated, retrying in TCP mode.
>
> ; <<>> DiG 9.8.3-P1 <<>> +dnssec wikipedia.org
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 33183
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags: do; udp: 4096

why is this EDNS udp 4096 but

[...]
>   dig +dnssec wikipedia.org
>
> ; <<>> DiG 9.8.3-P1 <<>> +dnssec wikipedia.org
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13239
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags: do; udp: 1280

this one is only 1280??

-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.