From: Lennart Poettering <lennart@poettering.net>
Date: Tue, 29 Dec 2015 18:27:55 +0000 (+0100)
Subject: update DNSSEC TODO
X-Git-Tag: v229~180^2~3
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=0a9a2ac3d3369b5add3b54823d088ba89baa27ab;p=thirdparty%2Fsystemd.git

update DNSSEC TODO
---

diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c
index 3f5226de0d3..aca67b85f86 100644
--- a/src/resolve/resolved-dns-dnssec.c
+++ b/src/resolve/resolved-dns-dnssec.c
@@ -42,7 +42,8 @@
  *   - per-interface DNSSEC setting
  *   - nxdomain on qname
  *   - retry on failed validation?
- *   - DSA support?
+ *   - DNSSEC key revocation support? https://tools.ietf.org/html/rfc5011
+ *   - when doing negative caching, use NSEC/NSEC3 RR instead of SOA for TTL
  *
  * */