From c883949a97b4eb2d779bee86559eec756aa7138b Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Thu, 29 Dec 2022 22:39:12 +0100 Subject: [PATCH] Document cert_ignore_timestamp --- dnscrypt-proxy/example-dnscrypt-proxy.toml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/dnscrypt-proxy/example-dnscrypt-proxy.toml b/dnscrypt-proxy/example-dnscrypt-proxy.toml index 981eaea3..3b46a2fa 100644 --- a/dnscrypt-proxy/example-dnscrypt-proxy.toml +++ b/dnscrypt-proxy/example-dnscrypt-proxy.toml @@ -188,6 +188,13 @@ keepalive = 30 cert_refresh_delay = 240 +## Initially don't check DNSCrypt server certificates for expiration, and +## only start checking them after a first successful connection to a resolver. +## This can be useful on routers with no battery-backed clock. + +# cert_ignore_timestamp = false + + ## DNSCrypt: Create a new, unique key for every single DNS query ## This may improve privacy but can also have a significant impact on CPU usage ## Only enable if you don't have a lot of network load