Hi, does the freebsd resolver(3) support sending the DO bit in queries and thus do DNSSEC validation ? I tried using ssh with SSHFP RR's in a signed zone but i still get the "insecure Key" message from ssh on FreeBSD (works on some other OS). cherio, Leon