]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/resolve/resolved-dns-transaction.c
projects / thirdparty / systemd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8300ba2) | patch
resolved: implement RFC5452
authorTom Gundersen <teg@jklm.no>
Thu, 9 Jul 2015 00:58:15 +0000 (02:58 +0200)
committerTom Gundersen <teg@jklm.no>
Tue, 14 Jul 2015 16:50:57 +0000 (18:50 +0200)
commit29815b6c608b836cada5e349d06a96b63eaa65f3
tree7be9d6fd1f0b2a4017d245b2836b17d97a50e5b6tree | snapshot
parent8300ba218e3cf5049496937be8bce10f22d09bbccommit | diff
resolved: implement RFC5452

This improves the resilience against cache poisoning by being stricter
about only accepting responses that match precisely the requst they
are in reply to.

It should be noted that we still only use one port (which is picked
at random), rather than one port for each transaction. Port
randomization would improve things further, but is not required by
the RFC.
TODO diff | blob | blame | history
src/resolve/resolved-dns-transaction.c diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.