From 6f8a2c6817e35ca3e76130b31624f7f30e596433 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Mon, 4 Jan 2016 22:43:25 +0100 Subject: [PATCH] update DNSSEC TODO --- src/resolve/resolved-dns-dnssec.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c index f1edfc3970..ac2362275c 100644 --- a/src/resolve/resolved-dns-dnssec.c +++ b/src/resolve/resolved-dns-dnssec.c @@ -38,10 +38,8 @@ * - wildcard zones compatibility (NSEC/NSEC3 wildcard check is missing) * - multi-label zone compatibility * - cname/dname compatibility - * - per-interface DNSSEC setting * - nxdomain on qname - * - retry on failed validation? - * - DNSSEC key revocation support? https://tools.ietf.org/html/rfc5011 + * - per-interface DNSSEC setting * - when doing negative caching, use NSEC/NSEC3 RR instead of SOA for TTL * * */