[Dnsmasq-discuss] proper https/svcb configurations?

[WJ Park]

Hi, thank you for the great project.
I am using dnsmasq 2.90 on debian bookworm amd64 with a config below.
I found https/svcb response is missing answer. is there anything I could do
make this right?

```dnsmasq.conf
domain-needed
bogus-priv
dnssec
dnssec-check-unsigned
filterwin2k
strict-order
no-resolv
no-poll
conf-file=/etc/dnsmasq.d/trust-anchors.conf
server=127.0.0.1
listen-address=127.0.0.1
interface=lo
bind-interfaces
no-hosts
dhcp-range=interface:lo,127.0.0.1,127.0.0.1,12h
dhcp-leasefile=/var/lib/misc/dnsmasq.leases
cache-size=1000
cache-rr=ANY
no-negcache
conf-dir=/etc/dnsmasq.d/,*.conf
strip-mac
strip-subnet
local-service
dns-loop-detect
log-queries
log-dhcp
```

current dnsmasq response for https record of google.com.
```bash
$ dig HTTPS google.com @127.0.0.1

; <<>> DiG 9.18.33-1~deb12u2-Debian <<>> HTTPS google.com @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 53774
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 14 (Not Ready)
;; QUESTION SECTION:
;google.com. IN HTTPS

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Sat Jun 21 18:34:00 KST 2025
;; MSG SIZE  rcvd: 45
```

cloudflare dns response for https record of google.com.
```bash
$ dig HTTPS google.com @1.1.1.1

; <<>> DiG 9.18.33-1~deb12u2-Debian <<>> HTTPS google.com @1.1.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4566
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;google.com. IN HTTPS

;; ANSWER SECTION:
google.com. 12332 IN HTTPS 1 . alpn="h2,h3"

;; Query time: 11 msec
;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP)
;; WHEN: Sat Jun 21 18:36:15 KST 2025
;; MSG SIZE  rcvd: 64
```

thank you.
-Woojae Park
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20250622/c60ec26b/attachment.htm>