]> git.ipfire.org Git - thirdparty/bind9.git/commit
Do not cache minimal NSEC records (NSEC + RRSIG only)
authorMark Andrews <marka@isc.org>
Tue, 19 Oct 2021 03:40:27 +0000 (14:40 +1100)
committerPetr Špaček <pspacek@isc.org>
Thu, 2 Dec 2021 13:18:41 +0000 (14:18 +0100)
commit6fae151c9d4ac7200687d307cab71a11a6a2a93a
tree8499a741fa45a088be211050cb1a017e1437109b
parente906fefb7d95f1f5ba47f7892f3cc081d53be339
Do not cache minimal NSEC records (NSEC + RRSIG only)

these are not useful for dnssec synthesis as they can result in
false NODATA responses and just consume cache memory
lib/dns/resolver.c