unbound question generate keytag query _ta-4f66

[noplan]

shows up in our logfiles ...
info: generate keytag query _ta-4f66. NULL IN

any hints how to solve it or is it worthy to solve ;)
anyway i m gonna check our DNS and the support of DNSSEC

pfS-CE-2.4.5-RELEASE-p1

br NP

[Gertjan]

@noplan said in unbound question generate keytag query _ta-4f66:

_ta

These :

are inoffensive.
They show that Unbound is using DNSSEC. (Most of) not all sites are not set up to expose DNSSEC in their domain.
For your own domains : if your domain registrat has a plug-and-play version avaible, consider using it.
But document yourself first for its advantages and inconveniences.

Use https://dnsviz.net/ to check DNSSEC status of a domain.