diff --git a/towncrier/newsfragments/2239.bugfix b/towncrier/newsfragments/2239.bugfix
new file mode 100644
index 00000000..aba78f9a
--- /dev/null
+++ b/towncrier/newsfragments/2239.bugfix
@@ -0,0 +1 @@
+Work around a bug in coredns: set the DO flag on our DNSSEC queries. Add a new FAQ entry to explain our DNSSEC requirements and ensure that our error message points to it.