search

NetworkCommons / sig0namectl

Open dynamic DNS name management with SIG(0) update delegation.
https://sig0namectl.networkcommons.org
GNU Affero General Public License v3.0
12 stars 3 forks source link

Dev: Back End: Ensure all queries and updates are DNSSEC aware #29

Closed adam-burns closed 4 months ago

adam-burns commented 6 months ago

The front ends should be able to indicate whether DNS responses are secured within the DNSSEC chain of trust or indicate if they are not.

DNSSEC records can be passed in responses by setting the DNSSEC OK (DO) bit in the OPT record in the additional section of the query or update.

adam-burns commented 4 months ago

dns.js now offers a query function that modifies the query header option to enable DNSSEC.