[Dnsmasq-discuss] DNSSEC validation

[Geert Stappers]

On Wed, Apr 13, 2022 at 12:58:38AM +0100, Chris Staite via Dnsmasq-discuss wrote:
> Hi,

Hi,

 
> I’ve noticed that the 1.1.1.1/help was not working when running
> through dnsmasq.
 
Because I didn't understand "1.1.1.1/help not working",
did I visit http://1.1.1.1/help and got
redirected to https://1.1.1.1/help

Now there is an  URL      :-)


> It appears there’s a bug in the logic when a CNAME is returned from
> an unsigned zone.  I think there’s another bug in there in general
> that it returns BOGUS when a zone is SECURE also?
> 
> Anyway, please see my attached patch which remedies my problem and I
> believe implements DNSSEC as it was intended.
> 
> Thanks, Chris.
> 


Groeten
Geert Stappers
-- 
Silence is hard to parse