summaryrefslogtreecommitdiff
path: root/src/resolve
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2015-12-03 19:53:13 +0100
committerLennart Poettering <lennart@poettering.net>2015-12-03 21:17:49 +0100
commit2cd8727718632ed80fa3871fddf71506c548d770 (patch)
tree606e5a234bdda507c76ce69f28ab1517c9ef1a64 /src/resolve
parent24710c48ed16be5fa461fbb303a744a907541daf (diff)
resolved: maintain a short TODO list for DNSSEC support in the dnssec C files for now
Diffstat (limited to 'src/resolve')
-rw-r--r--src/resolve/resolved-dns-dnssec.c14
1 files changed, 14 insertions, 0 deletions
diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c
index bd3d2f5c58..a82265ad82 100644
--- a/src/resolve/resolved-dns-dnssec.c
+++ b/src/resolve/resolved-dns-dnssec.c
@@ -32,6 +32,20 @@
* How does the DNSSEC canonical form of a hostname with a label
* containing a dot look like, the way DNS-SD does it?
*
+ * TODO:
+ *
+ * - Iterative validation
+ * - NSEC proof of non-existance
+ * - NSEC3 proof of non-existance
+ * - Trust anchor store
+ * - wildcard zones
+ * - multi-label zones
+ * - cname support
+ * - DNSSEC bus API extensions
+ * - global + per-interface DNSSEC setting
+ * - DSA support
+ * - EC support?
+ *
* */
#define VERIFY_RRS_MAX 256