Bug#898530: reducing timesync errors

[積丹尼 Dan Jacobson]

>> Upon connecting to the Internet one sees
>> 
>> (1) systemd-resolved[482]: Server 127.0.0.1 does not support DNSSEC, downgrading to non-DNSSEC mode.

OK, it says "Server 127.0.0.1 does not support DNSSEC"

So there is no reason to proceed with

>> (2) systemd-resolved[482]: DNSSEC validation failed for question ntp.org IN SOA: failed-auxiliary
>> systemd-resolved[482]: DNSSEC validation failed for question pool.ntp.org IN DS: failed-auxiliary
>> systemd-resolved[482]: DNSSEC validation failed for question 0.debian.pool.ntp.org IN DS: failed-auxiliary
>> systemd-resolved[482]: DNSSEC validation failed for question 0.debian.pool.ntp.org IN SOA: failed-auxiliary
>> systemd-resolved[482]: DNSSEC validation failed for question 0.debian.pool.ntp.org IN A: failed-auxiliary

No?