Diff

plugins/mod_s2s_auth_certs.lua @ 12601:72f7bb3f30d3

net.resolvers.basic: Add opt-out argument for DNSSEC security status This makes explicit which lookups can accept an unsigned response. Insecure (unsigned, as before DNSSEC) A and AAAA records can be used as security would come from TLS, but an insecure TLSA record is worthless.
author Kim Alvefur <zash@zash.se>
date Tue, 02 Aug 2022 16:08:43 +0200
parent 12480:7e9ebdc75ce4
child 12808:12bd40b8e105
line wrap: on
line diff