| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
| |
Checking Disabled flag. Introduce a RES flag to do so. ok krw@
deraadt@ eric@
|
|
|
|
|
|
|
|
|
|
|
|
| |
RES_USE_DNSSEC is implemented by setting the DNSSEC DO bit in outgoing
queries. The resolver is then supposed to set the AD bit in the reply
if it managed to validate the answer through DNSSEC. Useful when the
application doesn't implement validation internally. This scheme
assumes that the validating resolver is trusted and that the
communication channel between the validating resolver and and the client
is secure.
ok eric@ gilles@
|
|
|
|
|
|
|
| |
EDNS allows for various DNS extensions, among which UDP DNS packets size
bigger than 512 bytes. The default is still to not advertize anything.
ok eric@
|
|
|
|
| |
direction & ok guenther
|
|
|
|
|
|
| |
Include tweaks suggested by mpi@
ok deraadt@
|
|
|
|
|
|
| |
the API gets public.
ok deraadt@
|
|
|
|
|
|
| |
to prevent collisions with third-party programs.
suggested by sthen@, ok theo@
|
|
|
|
|
|
| |
if that happens.
prodded by deraadt@
|
|
|
|
|
|
|
| |
flipped so that it always used a domain of ".."
Heavy lifting by otto@
ok eric@ otto@ miod@
|
| |
|
| |
|
|
resolver implementation.
|