diff options
| author | Lennart Poettering <lennart@poettering.net> | 2015-12-03 19:53:13 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2015-12-03 21:17:49 +0100 |
| commit | 2cd8727718632ed80fa3871fddf71506c548d770 (patch) | |
| tree | 606e5a234bdda507c76ce69f28ab1517c9ef1a64 | |
| parent | 24710c48ed16be5fa461fbb303a744a907541daf (diff) | |
resolved: maintain a short TODO list for DNSSEC support in the dnssec C files for now
| -rw-r--r-- | src/resolve/resolved-dns-dnssec.c | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c index bd3d2f5c58..a82265ad82 100644 --- a/src/resolve/resolved-dns-dnssec.c +++ b/src/resolve/resolved-dns-dnssec.c @@ -32,6 +32,20 @@ * How does the DNSSEC canonical form of a hostname with a label * containing a dot look like, the way DNS-SD does it? * + * TODO: + * + * - Iterative validation + * - NSEC proof of non-existance + * - NSEC3 proof of non-existance + * - Trust anchor store + * - wildcard zones + * - multi-label zones + * - cname support + * - DNSSEC bus API extensions + * - global + per-interface DNSSEC setting + * - DSA support + * - EC support? + * * */ #define VERIFY_RRS_MAX 256 |