[Dnsmasq-discuss] proxy-dnssec, how does it work (with unbound as upstream)

[Peter Russel]

according to this reply
(https://lists.nlnetlabs.nl/pipermail/unbound-users/2023-April/008070.html
(nlnetlabs.nl)) in the unbound mailing list, it should be possible for
proxy-dnssec to return the correct information about the DNSSEC
information, enclosed in the reply by either:
- the AD bit
- analyze the EDE codes for DNSSEC (unbound >= v1.16.1)

dnsmasq (pihole-FTL version) and unbound v1.17.1 running on the same
machine. Already tried adding proxy-dnssec directive, but can't see
any difference in the logs.

how does this work, will the DNSSEC status appear in the dnsmasq log,
or is there another method to catch the status?

thanks for your time and effort.