]> git.ipfire.org Git - thirdparty/knot-resolver.git/commitdiff
AD flag: the ranks from cache should be safe now
authorVladimír Čunát <vladimir.cunat@nic.cz>
Fri, 7 Apr 2017 16:23:11 +0000 (18:23 +0200)
committerVladimír Čunát <vladimir.cunat@nic.cz>
Fri, 7 Apr 2017 16:23:11 +0000 (18:23 +0200)
lib/resolve.c

index cf2048794c0ff8cb824d137572bb5bde65902656..7e751939ab0da4e63bee0be5919b8c1421d74efb 100644 (file)
@@ -569,10 +569,6 @@ static int answer_finalize(struct kr_request *request, int state)
        if (last && (last->flags & QUERY_STUB)) {
                secure = false; /* don't trust forwarding for now */
        }
-       if (last && (last->flags & QUERY_CACHED)) {
-               secure = secure && last->flags & QUERY_DNSSEC_WANT
-                        && !(last->flags & (QUERY_DNSSEC_INSECURE|QUERY_DNSSEC_BOGUS));
-       }
        if (last && (last->flags & QUERY_DNSSEC_OPTOUT)) {
                secure = false; /* the last answer is insecure due to opt-out */
        }