Skip to content

Commit d6025c1

Browse files
committed
Document cert_ignore_timestamp
DNSCrypt/dnscrypt-proxy@c883949
1 parent 5fa2a5f commit d6025c1

1 file changed

Lines changed: 7 additions & 0 deletions

File tree

config/dnscrypt-proxy.toml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -188,6 +188,13 @@ blocked_query_response = 'refused'
188188
cert_refresh_delay = 240
189189

190190

191+
## Initially don't check DNSCrypt server certificates for expiration, and
192+
## only start checking them after a first successful connection to a resolver.
193+
## This can be useful on routers with no battery-backed clock.
194+
195+
# cert_ignore_timestamp = false
196+
197+
191198
## DNSCrypt: Create a new, unique key for every single DNS query
192199
## This may improve privacy but can also have a significant impact on CPU usage
193200
## Only enable if you don't have a lot of network load

0 commit comments

Comments
 (0)