]> granicus.if.org Git - pdns/commit
rec: Split NODATA/NXDOMAIN NSEC wildcard denial proof of existence
authorRemi Gacogne <remi.gacogne@powerdns.com>
Tue, 31 Oct 2017 13:55:25 +0000 (14:55 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Tue, 31 Oct 2017 13:55:25 +0000 (14:55 +0100)
commit82566a96bd5d286b1ebe58237dfbbad6961f5550
tree24adbc7704e03e1e96d7a7d151c96ac152ff377e
parent4e7fea16f8774e7d9b8abe84f8c70efc39877340
rec: Split NODATA/NXDOMAIN NSEC wildcard denial proof of existence

Otherwise there is a very real risk that a NSEC will cover a more
specific wildcard and we end up with what looks like a NXDOMAIN
proof but is a NODATA one.
pdns/recursordist/test-syncres_cc.cc
pdns/validate.cc