]> git.bitcoin.ninja Git - dnssec-prover/commit
projects / dnssec-prover / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d644741) | patch
Validate NSec/3 records prove non-existence when handling C/DNAMEs
authorMatt Corallo <git@bluematt.me>
Mon, 26 Feb 2024 03:06:02 +0000 (03:06 +0000)
committerMatt Corallo <git@bluematt.me>
Sat, 2 Mar 2024 16:41:07 +0000 (16:41 +0000)
commite9d191edb546e1aac1194d7b50e8e535c7f54c69
tree7980b8a0b0f1fb6129612548df1888ceef4ef609tree | snapshot
parentd6447418045edfae2377e6358080b78b78c06e72commit | diff
Validate NSec/3 records prove non-existence when handling C/DNAMEs

When handling C/DNAME RRs we're required to validate that NSEC/3
records exist proving non-existence of the sought record itself. We
do this here.
src/validation.rs diff | blob | history
Generates and validates RFC 9102-formatted DNSSEC proofs