913b3a
- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is set