- Merge patch to fix for glue that is outside of zone, with

`harden-unverified-glue`, from Karthik Umashankar (Microsoft).
  Enabling this option protects the Unbound resolver against bad
  glue, that is unverified out of zone glue, by resolving them.
  It uses the records as last resort if there is no other working
  glue.
This commit is contained in:
W.C.A. Wijngaards
2024-08-23 08:56:48 +02:00
parent 348df52e05
commit 1e0cf1e86b
16 changed files with 416 additions and 9 deletions
+4
View File
@@ -176,6 +176,10 @@ config_file
Harden against spoofed glue (out of zone data).
.. attribute:: harden_unverified_glue
Harden against unverified glue.
.. attribute:: harden_dnssec_stripped
Harden against receiving no DNSSEC data for trust anchor.