> BIND in the base today comes with a full-featured local resolver
> configuration, which I'm confident that Dag-Erling can do for unbound
> (and which I would be glad to assist with if needed). Other than that,
> what integration are you concerned about?
The utilities (specifically host(1) and dig(1)) are the only
user-visible interfaces I care about. I don't see any need for there
to be an authoritative name server in the base system. So long as the
resolver works properly and does DNSsec validation....
