Correct way to change cache setting?

[DL6ER]

@anon55913113

by using proxy-dnssec in the DNSMASQ config

Note that Pi-hole cannot analyze/display the DNSSEC status (INSECURE/SECURE/BOGUS) responses in this configuration. The technical details have been discussed here (very long read, do it only if you're really interested):

Add Support for "proxy-dnssec": Display DNSSEC info

dnsmasq offers the 'proxy-dnssec' option to not validate DNSSEC itself but cache and provide the information from the upstream DNS server. If I set this option in /etc/dnsmasq.d/02-local.conf, dnsmasq forwards the DNSSEC info (ad flag) but the information is not displayed in query log. I'd like to see this information in the query log (same as if DNSSEC has been turned on). Would that be possible?