unbound.conf

server:
  interface: 127.0.0.1
  port: 53

  do-ip4: yes
  do-udp: yes
  do-tcp: yes
  do-ip6: no
  
  access-control: 0.0.0.0/0 deny
  access-control: 127.0.0.0/8 allow
  verbosity: 1
  val-log-level: 2
  harden-dnssec-stripped: yes

  hide-identity: yes
  hide-version: yes

  cache-min-ttl: 3600
  cache-max-ttl: 86400

  root-hints: "/etc/unbound/root.hints"
  auto-trust-anchor-file: "/etc/unbound/root.key"
  username: unbound

remote-control:
  control-enable: no
  control-interface: 127.0.0.1
  control-port: 8953

sudo chown -R unbound:unbound /etc/unbound/
sudo -u unbound curl http://www.internic.net/domain/named.cache -o /etc/unbound/root.hints
sudo -u unbound unbound-anchor -va /etc/unbound/root.key
sudo /etc/init.d/unbound restart
sudo lsof -Pni :53

WEBSITES WITH DNSSEC OR DANE

DNSSEC + DANE

• https://www.isc.org/
• https://www.unbound.net/
• https://posteo.de/en/
• https://getfedora.org/
• https://www.freebsd.org/
• https://www.torproject.org/
• https://www.debian.org/
• https://mail.de/
• https://mailbox.org
• https://www.das-labor.org/
• https://www.ietf.org/
• https://www.dotplex.de/
• https://internet.nl/
• https://www.bund.de/
• https://netfuture.ch/
• https://diasp.org/

DNSSEC

• https://www.postbank.de/
• https://www.iana.org/
• http://nic.nl/
• http://www.government.nl/
• http://www.denic.de/
• https://www.ripe.net/
• https://www.nic.ch/
• http://www.upstandinghackers.com/
• http://www.internetsociety.org/
• http://trendingdeutschland.com/
• http://www.kiez.net/
• http://streams.xenim.de/