it could be worse

git-svn-id: file:///svn/unbound/trunk@1707 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/TODO b/doc/TODO
index 44077495a61ea663cc3c040a929585ff8d5c311a..940f2bb075ab34527c9fc1297dfc0b6f8807a779 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -210,6 +210,10 @@ Triggered by a trust anchor or by a signed DS record for a zone.
     Advantage because if the zone is mildly broken, no time is spent redoing
     stuff that was fine.  Or after a spoof most other stuff is still there.
     Disadvantage.  After a sale the old data could linger for TTL time.
+  * listing bad servers and trying again may not be good enough, since
+    a combinatorial explosion for DSxDNSKEYxdata is possible for every
+    signature validation (using different nameservers for DS, DNSKEY and
+    data, assuming only the right combination has a chain of trust to data).
 
 
 later