===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/etc/unbound.conf,v
retrieving revision 1.7
retrieving revision 1.8
diff -c -r1.7 -r1.8
*** src/etc/unbound.conf	2016/03/30 01:41:25	1.7
--- src/etc/unbound.conf	2018/03/29 20:40:22	1.8
***************
*** 1,4 ****
! # $OpenBSD: unbound.conf,v 1.7 2016/03/30 01:41:25 sthen Exp $
  
  server:
  	interface: 127.0.0.1
--- 1,4 ----
! # $OpenBSD: unbound.conf,v 1.8 2018/03/29 20:40:22 florian Exp $
  
  server:
  	interface: 127.0.0.1
***************
*** 20,32 ****
  	hide-version: yes
  
  	# Uncomment to enable qname minimisation.
! 	# https://tools.ietf.org/html/draft-ietf-dnsop-qname-minimisation-08
  	#
! 	# qname-minimisation: yes
  
  	# Uncomment to enable DNSSEC validation.
  	#
  	#auto-trust-anchor-file: "/var/unbound/db/root.key"
  
  	# Serve zones authoritatively from Unbound to resolver clients.
  	# Not for external service.
--- 20,37 ----
  	hide-version: yes
  
  	# Uncomment to enable qname minimisation.
! 	# https://tools.ietf.org/html/rfc7816
  	#
! 	#qname-minimisation: yes
  
  	# Uncomment to enable DNSSEC validation.
  	#
  	#auto-trust-anchor-file: "/var/unbound/db/root.key"
+ 
+ 	# Uncomment to synthesize NXDOMAINs from DNSSEC NSEC chains
+ 	# https://tools.ietf.org/html/rfc8198
+ 	#
+ 	#aggressive-nsec: yes
  
  	# Serve zones authoritatively from Unbound to resolver clients.
  	# Not for external service.