DNS/KnotResolver/config/DNSSECについて、ここに記述してください。

DNSSEC, data verification

Good news! Knot Resolver uses secure configuration by default, and this configuration should not be changed unless absolutely necessary, so feel free to skip over this section.

Warning

Options in this section are intended only for expert users and normally should not be needed.

mode も DNSSEC前提らしい。