validate

Since: Version 2025.03.19-1d3f1f67

The functionality described in this section requires version 2025.03.19-1d3f1f67 of KumoMTA, or a more recent version.

Boolean. Enables DNSSEC validation.

For the Hickory backend, queries are validated against the bundled DNSSEC trust anchors.

For the Unbound backend, this loads the built-in DNSSEC trust anchors into the unbound context. See also trust_anchor_file.

DANE for outbound SMTP requires DNSSEC validation; see enable_dane.