[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#679828: libc6: No easy way of enabling DNSSEC validation aka RES_USE_DNSSEC



An update:

Now it would make sense to be able to add a DO-bit, via /etc/resolv.conf:

https://developers.google.com/speed/public-dns/faq#dnssec

It would also be interesting if the AD-bit could be set, in accordance
with http://tools.ietf.org/html/rfc6840#section-5.7

Some good inspiration can be found on this ancient page:

http://bd.hauke-lampe.de/dnssec/adding-res_use_dnssec-to-glibc.html

I am very much in favor for these enhancements.

--
Marco


Reply to: