Packages with the dnssec use flag

net-dns / dnsmasq : Small forwarding DNS server

  • Enable support DNSSEC validation and caching.

net-vpn / libreswan : IPsec implementation for Linux, fork of Openswan

  • Use DNSSEC resolver (requires net-dns/unbound)