diff options
| author | Lennart Poettering <lennart@poettering.net> | 2016-01-15 21:40:20 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2016-01-17 20:47:46 +0100 |
| commit | c15493f4822b7176f0a6449e8f335844f512eed4 (patch) | |
| tree | 5eed675c7e64e98404b111e85e5811a4e0a1ad8c | |
| parent | resolved: try to reduce number or DnsResourceKeys we keep around by merging them (diff) | |
| download | systemd-c15493f4822b7176f0a6449e8f335844f512eed4.tar.xz systemd-c15493f4822b7176f0a6449e8f335844f512eed4.zip | |
resolved: update DNSSEC TODO
| -rw-r--r-- | src/resolve/resolved-dns-dnssec.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c index 43fb365d68..f999a8cc77 100644 --- a/src/resolve/resolved-dns-dnssec.c +++ b/src/resolve/resolved-dns-dnssec.c @@ -40,9 +40,10 @@ * - log all RRs that failed validation * - enable by default * - Allow clients to request DNSSEC even if DNSSEC is off - * - find public DNAME test domain * - make sure when getting an NXDOMAIN response through CNAME, we still process the first CNAMEs in the packet - * - flush cache when DNSSEC setting changes + * - update test-complex to also do ResolveAddress lookups + * - extend complex test to check "xn--kprw13d." DNAME domain + * - rework IDNA stuff: only to IDNA for ResolveAddress and ResolveService, and prepare a pair of lookup keys then, never do IDNA comparisons after that * */ #define VERIFY_RRS_MAX 256 |