From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 3 Dec 2015 18:53:13 +0000 (+0100)
Subject: resolved: maintain a short TODO list for DNSSEC support in the dnssec C files for now
X-Git-Tag: v229~235^2~3
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=2cd8727718632ed80fa3871fddf71506c548d770;p=thirdparty%2Fsystemd.git

resolved: maintain a short TODO list for DNSSEC support in the dnssec C files for now
---

diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c
index bd3d2f5c589..a82265ad821 100644
--- a/src/resolve/resolved-dns-dnssec.c
+++ b/src/resolve/resolved-dns-dnssec.c
@@ -32,6 +32,20 @@
  * How does the DNSSEC canonical form of a hostname with a label
  * containing a dot look like, the way DNS-SD does it?
  *
+ * TODO:
+ *
+ *   - Iterative validation
+ *   - NSEC proof of non-existance
+ *   - NSEC3 proof of non-existance
+ *   - Trust anchor store
+ *   - wildcard zones
+ *   - multi-label zones
+ *   - cname support
+ *   - DNSSEC bus API extensions
+ *   - global + per-interface DNSSEC setting
+ *   - DSA support
+ *   - EC support?
+ *
  * */
 
 #define VERIFY_RRS_MAX 256