I want to use DNSCurve (for privacy) to a trusted DNSSec resolver (for integrity), and want to ensure that I can tell a recursive resolver (like 8.8.8.8, or OpenDNS) that I only want DNSSec queries.
Logically this would be similar to issuing either of the following options:
- Recurse
- No Recurse
Question
Does such a technique exist, no matter if it is enforced by a DNS recursive resolver (mentioned above) or as a proposed RFC enhancement to the passive DNS client to Server protocol?