[Dnsmasq-discuss] dnssec-check-unsigned breaks linux.conf.au
Maciej Soltysiak
maciej at soltysiak.com
Sun Jun 7 13:01:22 BST 2015
> > On Sat 06 Jun 2015 23.16.42 Simon Kelley wrote:
> >> Turns out that this domain has a "weird" by valid use of NSEC3
> >> which broke dnsmasq's corner-case code.
> >>
> >> 2.73rc9 should fix it.
> >
> > Thanks, it looks like it works.
Awesome! Thanks to both of you. I am not impacted by this but I love such
stories of corner cases being discovered, reported, fixed and even
explained!
> A longer explanation (using NSEC because it's easier to understand,
> NSEC3, which was used in this case, has the same principle but it less
> obvious to understand.)
Thanks for the very nice and simple explanation, Simon.
> It's fun stuff, this DNSSEC.
It sure is.
> Simon.
Maciej
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20150607/a2a95aea/attachment.html>
More information about the Dnsmasq-discuss
mailing list