WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-09-10 11:57:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

it could be worse

Browse Source 
git-svn-id: file:///svn/unbound/trunk@1707 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards
2009-07-08 12:07:03 +00:00
parent f3b66c177b
commit f6715aeb0f
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/TODO
+4
View File
@@ -210,6 +210,10 @@ Triggered by a trust anchor or by a signed DS record for a zone.
Advantage because if the zone is mildly broken, no time is spent redoing
stuff that was fine. Or after a spoof most other stuff is still there.
Disadvantage. After a sale the old data could linger for TTL time.
* listing bad servers and trying again may not be good enough, since
a combinatorial explosion for DSxDNSKEYxdata is possible for every
signature validation (using different nameservers for DS, DNSKEY and
data, assuming only the right combination has a chain of trust to data).
later