| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Spotted by krw@
|
|
|
|
|
|
|
|
|
|
|
|
| |
RES_USE_DNSSEC is implemented by setting the DNSSEC DO bit in outgoing
queries. The resolver is then supposed to set the AD bit in the reply
if it managed to validate the answer through DNSSEC. Useful when the
application doesn't implement validation internally. This scheme
assumes that the validating resolver is trusted and that the
communication channel between the validating resolver and and the client
is secure.
ok eric@ gilles@
|
|
|
|
| |
Requested earlier by eric@
|
|
|
|
|
|
|
| |
EDNS allows for various DNS extensions, among which UDP DNS packets size
bigger than 512 bytes. The default is still to not advertize anything.
ok eric@
|
|
|
|
|
|
| |
pack/unpack contexts.
ok krw@ deraadt@
|
|
|
|
| |
direction & ok guenther
|
|
|
|
|
|
| |
Include tweaks suggested by mpi@
ok deraadt@
|
|
|
|
|
|
| |
the API gets public.
ok deraadt@
|
|
|
|
|
|
| |
hostnames before returning them to the caller.
ok deraadt@
|
|
|
|
| |
ok jca krw ingo
|
|
|
|
|
|
| |
to prevent collisions with third-party programs.
suggested by sthen@, ok theo@
|
| |
|
|
|
|
| |
spotted by matthew@
|
| |
|
|
|
|
| |
ok bluhm@ naddy@ sthen@
|
| |
|
| |
|
|
The idea is to eventually replace the existing resolver with
something better. Time to start working on it in tree.
ok deraadt@
|