The next option, enabled by default, is Enable DNSSEC Support. DNSSEC is a means of protecting DNS data from attacks which use forged or manipulated DNS data, such as DNS cache poisoning. If you enable it and the upstream DNS server to which you will be forwarding DNS requests does not support DNSSEC, however, DNS resolution may not work.
The Enable Forwarding Mode checkbox allows you to control whether Unbound will query root servers directly (if this option is unchecked) or if queries will be forwarded to the upstream DNS servers. You should only enable this option if the upstream DNS servers are trusted. If you have enabled DNSSEC support, and you consider this to be important, you should also make sure the upstream ...
