summaryrefslogtreecommitdiff
path: root/src/resolve/resolved-dns-dnssec.c
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2015-12-29 19:27:55 +0100
committerLennart Poettering <lennart@poettering.net>2015-12-29 21:42:10 +0100
commit0a9a2ac3d3369b5add3b54823d088ba89baa27ab (patch)
tree78977cadafe90a81b91d2020dd91107ee2f550fd /src/resolve/resolved-dns-dnssec.c
parent6af47493de0ef2b66d4c3fbcdd4a2e12fec4bfba (diff)
update DNSSEC TODO
Diffstat (limited to 'src/resolve/resolved-dns-dnssec.c')
-rw-r--r--src/resolve/resolved-dns-dnssec.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c
index 3f5226de0d..aca67b85f8 100644
--- a/src/resolve/resolved-dns-dnssec.c
+++ b/src/resolve/resolved-dns-dnssec.c
@@ -42,7 +42,8 @@
* - per-interface DNSSEC setting
* - nxdomain on qname
* - retry on failed validation?
- * - DSA support?
+ * - DNSSEC key revocation support? https://tools.ietf.org/html/rfc5011
+ * - when doing negative caching, use NSEC/NSEC3 RR instead of SOA for TTL
*
* */