From 28bf03b5265be30079630b5bc2c3dafc13fce27b Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Wed, 6 Jan 2016 18:39:08 +0100
Subject: [PATCH] update DNSSEC TODO

---
 src/resolve/resolved-dns-dnssec.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c
index 387355d8f8..51fe710795 100644
--- a/src/resolve/resolved-dns-dnssec.c
+++ b/src/resolve/resolved-dns-dnssec.c
@@ -41,6 +41,8 @@
  *   - nxdomain on qname
  *   - workable hack for the .corp, .home, .box case
  *   - bus calls to override DNSEC setting per interface
+ *   - log all DNSSEC downgrades
+ *   - enable by default
  *
  * */