]> git.ipfire.org Git - thirdparty/bind9.git/commit
Change the QNAME minimization algorithm to follow the standard
authorOndřej Surý <ondrej@isc.org>
Thu, 27 Nov 2025 13:07:35 +0000 (14:07 +0100)
committerOndřej Surý <ondrej@isc.org>
Thu, 27 Nov 2025 15:47:29 +0000 (16:47 +0100)
commited460c50b7868e1f797eb609908bb97dd56149fa
treed30c3b475492acca73ee6b5e4be4636fe5751aea
parent40c375c58eae35ecf4112a2fffd8d491f9dfaa4a
Change the QNAME minimization algorithm to follow the standard

In !9155, the QNAME minimization was changed to not leak the query type
to the parent name server.  This violates RFC 9156 Section 3, step (3)
and it is not necessary.  It also breaks some (weird) authoritative DNS
setups, especially when CNAMEs are involved.  Also there is really no
privacy leak with query type.
.gitlab-ci.yml
bin/tests/system/dnssec/tests_validation.py
bin/tests/system/mirror/tests.sh
bin/tests/system/qmin/tests.sh
bin/tests/system/resolver/tests.sh
bin/tests/system/rpzextra/tests_rpzextra.py
bin/tests/system/synthfromdnssec/tests.sh
lib/dns/resolver.c