I get a red flag from firefox's dnssec-validator on: http://dankaminsky.com/ on admittedly a much older version of dnsmasq. (this is also my sneaky way of coaxing y'all to read his last two articles) -- Dave Täht NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article