Mark Andrews b17f6eba6a Reject primary zones with an DS record at the zone apex. ...

DS records only belong at delegation points and if present
at the zone apex are invariably the result of administrative
errors.  Additionally they can't be queried for with modern
resolvers as the parent servers will be queried.

(cherry picked from commit 35a58d30c9)

2020-06-04 16:06:07 +02:00

..

.gitattributes

…

bad1.db

…

bad2.db

…

bad3.db

…

bad4.db

…

bad-badclass.raw

…

bad-caa-rr.db

…

bad-cdnskey.db

…

bad-cds.db

…

bad-dhcid.db

…

bad-dns-sd-reverse.db

…

bad-ds.db

…

bad-eid.db

…

bad-generate-tkey.db

…

bad-nimloc.db

…

bad-nsap-empty.db

…

bad-nsap-odd-nibble.db

…

bad-nsec3-padded.db

…

bad-nsec3owner-padded.db

…

bad-tkey.db

…

bad-tsig.db

…

bad-unspec.db

…

badttl.db

…

crashzone.db

…

delegating-ns-address-below-dname.db

…

good1.db

…

good-cdnskey.db

…

good-cds.db

…

good-dns-sd-reverse.db

…

good-gc-msdcs.db

…

good-nsap.db

…

good-nsec3-nopadhash.db

…

good-occulted-ns-by-dname.db

…

good-occulted-ns-by-ns.db

…

inherit.db

…

nowarn.inherited.owner.db

…

ns-address-below-dname.db

…

spf.db

…

test1.db

…

test2.db

…

warn.inherit.origin.db

…

warn.inherited.owner.db

…