From: Lennart Poettering Date: Mon, 4 Jan 2016 21:43:25 +0000 (+0100) Subject: update DNSSEC TODO X-Git-Tag: v229~170^2~5 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=6f8a2c6817e35ca3e76130b31624f7f30e596433;p=thirdparty%2Fsystemd.git update DNSSEC TODO --- diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c index f1edfc3970a..ac2362275c6 100644 --- a/src/resolve/resolved-dns-dnssec.c +++ b/src/resolve/resolved-dns-dnssec.c @@ -38,10 +38,8 @@ * - wildcard zones compatibility (NSEC/NSEC3 wildcard check is missing) * - multi-label zone compatibility * - cname/dname compatibility - * - per-interface DNSSEC setting * - nxdomain on qname - * - retry on failed validation? - * - DNSSEC key revocation support? https://tools.ietf.org/html/rfc5011 + * - per-interface DNSSEC setting * - when doing negative caching, use NSEC/NSEC3 RR instead of SOA for TTL * * */