]> git.ipfire.org Git - thirdparty/bind9.git/commit
dnssec-policy: refuse to load non-zero iterations
authorMatthijs Mekking <matthijs@isc.org>
Wed, 22 Nov 2023 11:29:56 +0000 (12:29 +0100)
committerMatthijs Mekking <matthijs@isc.org>
Tue, 5 Dec 2023 14:58:58 +0000 (14:58 +0000)
commit75e0d394dd2147a0b07524521c084a71801e4eee
treee7d94d84e4bd6531d675072eb50505d684b947ee
parent336d99f12182aeeecbaf5c9d4c989b0fb004ae54
dnssec-policy: refuse to load non-zero iterations

According to RFC 9276, if NSEC3 must be used, then an iterations count
of 0 MUST be used to alleviate computational burdens.
lib/isccfg/kaspconf.c