Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(dnssec): new pkg/dnssec package #97

Open
wants to merge 6 commits into
base: v2.0.0-beta
Choose a base branch
from
Open

feat(dnssec): new pkg/dnssec package #97

wants to merge 6 commits into from

Conversation

qdm12
Copy link
Owner

@qdm12 qdm12 commented Dec 30, 2021

  • Iterative DNSSEC validation
  • Metrics: secure, insecure, bogus
  • Validate root zone with hardcoded DS record from IANA
  • Auto-update root zone DS record
  • Caching?
    • Use custom caching or DNS request/response existing cache interface?
    • Can DoT/DoH handlers only add to cache if DNSSEC validated (to check depending on strict mode)
  • Handle NSEC and/or NSEC3
  • Strict mode to reject insecure responses

@qdm12 qdm12 changed the base branch from master to v2.0.0-beta December 30, 2021 17:59
@qdm12 qdm12 force-pushed the dnssec branch 5 times, most recently from ae24a55 to c1ecde9 Compare January 2, 2022 15:15
@qdm12 qdm12 force-pushed the v2.0.0-beta branch 2 times, most recently from 38626de to 81f9533 Compare June 24, 2022 05:05
@qdm12 qdm12 force-pushed the v2.0.0-beta branch 2 times, most recently from 562c7a2 to a6e7456 Compare August 10, 2023 12:45
@qdm12 qdm12 force-pushed the dnssec branch 2 times, most recently from c779e27 to 46fc699 Compare December 1, 2023 08:30
@qdm12 qdm12 force-pushed the dnssec branch 3 times, most recently from 81296b4 to 01bd0df Compare January 3, 2024 20:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant