[getdns-users] [DNSSEC-Transparency] Example using the "dnssec_return_validation_chain" extension

[Paul Wouters]

> 
> My validation program reads a set of RR's in wire format where the first
> RR is a DS RR, the next one is an RRSIG RR covering the previous DS RR
> and the rest are "support records", including RRSIG's.

Note you need to be able to accept any order of RRdata if you get the order that came in on the wire (because at least powerdns randomized the rrset)

> 
> _______________________________________________
> DNSSEC-Transparency mailing list
> DNSSEC-Transparency at lists.sunet.se
> https://lists.sunet.se/listinfo/dnssec-transparency