]> git.bitcoin.ninja Git - dnssec-prover/commit
Validate NSec/3 records prove non-existence when handling C/DNAMEs
authorMatt Corallo <git@bluematt.me>
Mon, 26 Feb 2024 03:06:02 +0000 (03:06 +0000)
committerMatt Corallo <git@bluematt.me>
Sat, 2 Mar 2024 16:41:07 +0000 (16:41 +0000)
commite9d191edb546e1aac1194d7b50e8e535c7f54c69
tree7980b8a0b0f1fb6129612548df1888ceef4ef609
parentd6447418045edfae2377e6358080b78b78c06e72
Validate NSec/3 records prove non-existence when handling C/DNAMEs

When handling C/DNAME RRs we're required to validate that NSEC/3
records exist proving non-existence of the sought record itself. We
do this here.
src/validation.rs