]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
update DNSSEC TODO
authorLennart Poettering <lennart@poettering.net>
Mon, 4 Jan 2016 21:43:25 +0000 (22:43 +0100)
committerLennart Poettering <lennart@poettering.net>
Mon, 4 Jan 2016 21:43:25 +0000 (22:43 +0100)
src/resolve/resolved-dns-dnssec.c

index f1edfc3970a0483cf8c6d792dae96ba2a5231681..ac2362275c626fec5cccde9f0c3c528a28b20145 100644 (file)
  *   - wildcard zones compatibility (NSEC/NSEC3 wildcard check is missing)
  *   - multi-label zone compatibility
  *   - cname/dname compatibility
- *   - per-interface DNSSEC setting
  *   - nxdomain on qname
- *   - retry on failed validation?
- *   - DNSSEC key revocation support? https://tools.ietf.org/html/rfc5011
+ *   - per-interface DNSSEC setting
  *   - when doing negative caching, use NSEC/NSEC3 RR instead of SOA for TTL
  *
  * */