0
I Use This!
Inactive

Commits : Listings

Analyzed 1 day ago. based on code collected 1 day ago.
Apr 30, 2023 — Apr 30, 2024
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
Make NSEC3 max iteration count configurable More... almost 11 years ago
Add default handling in determining support for DS algorithms More... almost 11 years ago
Make NSEC3 utilities instanced in preparation to pass config data More... almost 11 years ago
Recognize insecure NSEC3 name errors More... almost 11 years ago
Treat NSEC3 NODATA responses under opt-out as insecure More... almost 11 years ago
Don't validate queries with qtype=RRSIG on positive responses More... almost 11 years ago
Detect insecure delegation in NSEC NODATA proof when qtype is DS More... almost 11 years ago
Only show the qname in the error message when a CNAME to NODATA failed More... almost 11 years ago
Remove validation code that deals with DNSKEY trust anchors More... almost 11 years ago
Store trust anchors always DS in memory. More... almost 11 years ago
Fix validation of positive responses consisting of multiple wildcards More... almost 11 years ago
Limit visibility of internal state structure More... almost 11 years ago
Use parent domain when searching for the signer and qtype is NS or DS More... almost 11 years ago
Change misleading resource key name More... almost 11 years ago
Limit validation failures in TXT record to 250 chars More... almost 11 years ago
Update parts of NSEC3 validation to today's unbound code More... almost 11 years ago
Prefer configured trust anchors over fetched keys More... almost 11 years ago
Remove pointless string concatenations More... almost 11 years ago
Treat delegations with only unknown algorithms as insecure. More... almost 11 years ago
Correctly handle islands of trust consisting of DS records More... almost 11 years ago
Add test to validate NODATA on a query to an ENT More... almost 11 years ago
Add tests to ensure the validity of NSEC signatures and that wildcard synthesis was performed using the correct wildcard. More... almost 11 years ago
Clarify precedence in NSEC name error proofing More... almost 11 years ago
Remove checks for null keySets as the case can never exist More... almost 11 years ago
Test that queries for DNAME records are valid More... almost 11 years ago
Check that DNAME responses without synthesized CNAME are valid More... almost 11 years ago
Check that multiple synthesized CNAMEs in a DNAME response is bogus More... almost 11 years ago
Ensure too long DNAME results are handled correctly More... almost 11 years ago
Load DNSKEYs live as they might change. More... almost 11 years ago
Test loading of trust anchors through the property More... almost 11 years ago