From: Vladimír Čunát <vladimir.cunat@nic.cz>
Date: Fri, 7 Apr 2017 16:23:11 +0000 (+0200)
Subject: AD flag: the ranks from cache should be safe now
X-Git-Tag: v1.3.0~23^2~10
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=afe1e46604d1b30e7bb9834ee5b3d999b397bae7;p=thirdparty%2Fknot-resolver.git

AD flag: the ranks from cache should be safe now
---

diff --git a/lib/resolve.c b/lib/resolve.c
index cf2048794..7e751939a 100644
--- a/lib/resolve.c
+++ b/lib/resolve.c
@@ -569,10 +569,6 @@ static int answer_finalize(struct kr_request *request, int state)
 	if (last && (last->flags & QUERY_STUB)) {
 		secure = false; /* don't trust forwarding for now */
 	}
-	if (last && (last->flags & QUERY_CACHED)) {
-		secure = secure && last->flags & QUERY_DNSSEC_WANT
-			 && !(last->flags & (QUERY_DNSSEC_INSECURE|QUERY_DNSSEC_BOGUS));
-	}
 	if (last && (last->flags & QUERY_DNSSEC_OPTOUT)) {
 		secure = false; /* the last answer is insecure due to opt-out */
 	}