summaryrefslogtreecommitdiff
path: root/src/resolve/resolved-dns-dnssec.c
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2016-01-15 21:40:20 +0100
committerLennart Poettering <lennart@poettering.net>2016-01-17 20:47:46 +0100
commitc15493f4822b7176f0a6449e8f335844f512eed4 (patch)
tree5eed675c7e64e98404b111e85e5811a4e0a1ad8c /src/resolve/resolved-dns-dnssec.c
parentf57e3cd5fa709ec0f52531eccba909ac0851927c (diff)
resolved: update DNSSEC TODO
Diffstat (limited to 'src/resolve/resolved-dns-dnssec.c')
-rw-r--r--src/resolve/resolved-dns-dnssec.c5
1 files changed, 3 insertions, 2 deletions
diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c
index 43fb365d68..f999a8cc77 100644
--- a/src/resolve/resolved-dns-dnssec.c
+++ b/src/resolve/resolved-dns-dnssec.c
@@ -40,9 +40,10 @@
* - log all RRs that failed validation
* - enable by default
* - Allow clients to request DNSSEC even if DNSSEC is off
- * - find public DNAME test domain
* - make sure when getting an NXDOMAIN response through CNAME, we still process the first CNAMEs in the packet
- * - flush cache when DNSSEC setting changes
+ * - update test-complex to also do ResolveAddress lookups
+ * - extend complex test to check "xn--kprw13d." DNAME domain
+ * - rework IDNA stuff: only to IDNA for ResolveAddress and ResolveService, and prepare a pair of lookup keys then, never do IDNA comparisons after that
* */
#define VERIFY_RRS_MAX 256