examine dnskey on child side retry.

git-svn-id: file:///svn/unbound/trunk@1716 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/TODO b/doc/TODO
index 1cbdc89c07a87f2d7013ed388a28c0ff27f7e862..cfea065ad3641acd5d2ea5a2f269e63787a5a41b 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -142,6 +142,7 @@ Triggered by a trust anchor or by a signed DS record for a zone.
     The dnssec retry scheme works without this cache entry.
   * If the key cache entry 'being-backed-off' is true and isdata then:
        The parent is backedoff, it must be the childs fault. Retry to child.
+       if the child-dnskey is bogus, then retry is useless, stop.
        Perform a child-retry - purge dataonly, childside, mark
        data-IPaddress from child as to avoid-forquery. counterperquery,
        max is 3, if reached, set this data element RRset&msg to the