Michał Kępień
b3bee6cd37
Treat records below a DNAME as out-of-zone data
...
DNAME records indicate bottom of zone and thus no records below a DNAME
should be DNSSEC-signed or included in NSEC(3) chains. Add a helper
function, has_dname(), for detecting DNAME records at a given node.
Prevent signing DNAME-obscured records. Check that DNAME-obscured
records are not signed.
(cherry picked from commit 9a4145168c )
2018-06-13 13:11:13 +02:00
..
2017-04-20 13:01:35 +10:00
2016-12-09 01:20:54 +00:00
2018-03-15 09:09:15 +01:00
2018-03-15 09:09:15 +01:00
2016-12-09 01:20:54 +00:00
2016-12-09 01:20:54 +00:00
2018-03-15 09:09:15 +01:00
2018-03-15 09:09:15 +01:00
2016-12-09 01:20:54 +00:00
2017-08-01 01:36:19 +00:00
2018-03-15 09:09:15 +01:00
2018-03-15 09:09:15 +01:00
2017-08-01 01:36:19 +00:00
2017-08-01 01:36:19 +00:00
2018-03-15 11:30:37 -07:00
2018-03-15 11:30:37 -07:00
2017-08-01 01:36:19 +00:00
2016-12-09 01:20:54 +00:00
2018-03-15 09:09:15 +01:00
2018-03-15 09:09:15 +01:00
2016-12-09 01:20:54 +00:00
2017-08-22 01:41:01 +00:00
2018-03-15 09:09:15 +01:00
2018-03-15 09:09:15 +01:00
2017-08-22 01:41:01 +00:00
2017-04-12 01:20:23 +00:00
2018-06-13 13:11:13 +02:00
2018-03-15 11:30:37 -07:00
2017-04-12 01:20:23 +00:00
2016-12-09 01:20:54 +00:00
2018-03-15 09:09:15 +01:00
2018-03-15 09:09:15 +01:00
2016-12-09 01:20:54 +00:00
2018-06-13 13:11:13 +02:00
2018-06-13 13:11:13 +02:00
2018-03-15 11:30:37 -07:00