Skip to content

Conversation

@qdm12
Copy link
Owner

@qdm12 qdm12 commented Dec 30, 2021

  • Iterative DNSSEC validation
  • Metrics: secure, insecure, bogus
  • Validate root zone with hardcoded DS record from IANA
  • Auto-update root zone DS record
  • Caching?
    • Use custom caching or DNS request/response existing cache interface?
    • Can DoT/DoH handlers only add to cache if DNSSEC validated (to check depending on strict mode)
  • Handle NSEC and/or NSEC3
  • Strict mode to reject insecure responses

@qdm12 qdm12 changed the base branch from master to v2.0.0-beta December 30, 2021 17:59
@qdm12 qdm12 force-pushed the dnssec branch 5 times, most recently from ae24a55 to c1ecde9 Compare January 2, 2022 15:15
@qdm12 qdm12 force-pushed the v2.0.0-beta branch 2 times, most recently from 38626de to 81f9533 Compare June 24, 2022 05:05
@qdm12 qdm12 force-pushed the v2.0.0-beta branch 2 times, most recently from 562c7a2 to a6e7456 Compare August 10, 2023 12:45
@qdm12 qdm12 force-pushed the dnssec branch 2 times, most recently from c779e27 to 46fc699 Compare December 1, 2023 08:30
@qdm12 qdm12 force-pushed the dnssec branch 3 times, most recently from 81296b4 to 01bd0df Compare January 3, 2024 20:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants