I agree with the statement in the bug report that the default should be safer.
However, you can work around the problem in config management by installing the defaults file before installing the package. In our Puppet config we have the unbound package require the defaults file: https://review.openstack.org/#/c/80092/13/modules/unbound/manifests/init.pp -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/988513 Title: unbound defaults break DNS resolution when upstream DNS lacks DNSSEC support To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/988513/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
