[sr-dev] git:master: Core: added DNSSEC support for DNS queries

James Cloos cloos at jhcloos.com
Sat Oct 13 13:19:30 CEST 2012


Gnutls' design for dane seems to be the right approach in general for
apps which want to do dnssec validation:  provide options for whether
to respect resolv.conf and whether to cache results.  Its libdane links
to libunbound but allows apps to choose whether to tell libunbound to
parse resolv.conf and whether to cache results.

Apps which have config file should make those options start-time configurable.

-JimC
-- 
James Cloos <cloos at jhcloos.com>         OpenPGP: 1024D/ED7DAEA6



More information about the sr-dev mailing list