search

TechnitiumSoftware / DnsServer

Technitium DNS Server
https://technitium.com/dns/
GNU General Public License v3.0
3.84k stars 400 forks source link

Implement support for DNSSEC algorithms ED25519 and ED448 #819

Open ruifung opened 6 months ago

ruifung commented 6 months ago

This was bought up during a discussion on the IPv6 discord server. It was bought up that apparently Technitium is lacking as a validating recursive resolver due to cryptographic algorithm support, so I looked into it and decided to file a issue here.

Technitium DNS appears to be lacking support for the newer DNSKEY algorithms. Specifically, ed25519 and ed448 which of which the former is recommended for signing support and the latter is recommended for validation support, as per RFC8624, section 3.1

References: https://ed25519.no/ https://datatracker.ietf.org/doc/html/rfc8624#section-3.1

ShreyasZare commented 6 months ago

Thanks for the post. These algorithms are planned but not available as they are not yet supported by .NET runtime since the algorithms are not natively available on some OS.

ruifung commented 6 months ago

Of course it's microsoft. And it's been open since 2015 ffs.