]> git.ipfire.org Git - thirdparty/knot-resolver.git/commit
iterate: don't inherit _INSECURE on CNAME jumps
authorVladimír Čunát <vladimir.cunat@nic.cz>
Thu, 13 Apr 2017 12:40:29 +0000 (14:40 +0200)
committerVladimír Čunát <vladimir.cunat@nic.cz>
Thu, 13 Apr 2017 12:48:18 +0000 (14:48 +0200)
commite14eebecde3390ec41948b531e99525e1c9fd1df
treeb4a26e2653e375bfc4ed215e57133915a5c63596
parent3356da17e50daab52cb280a6f8d7c505524303a8
iterate: don't inherit _INSECURE on CNAME jumps

The jump may lead to secure zone, so let the sub-query find out by
itself.  Otherwise we might cache those RRs with INSECURE rank even
though they are secure.  This shouldn't harm AD flags anymore.
lib/layer/iterate.c