[getdns-users] [DNSSEC-Transparency] Example using the "dnssec_return_validation_chain" extension

Paul Wouters paul at nohats.ca
Sun Apr 3 17:49:26 UTC 2016



> 
> My validation program reads a set of RR's in wire format where the first
> RR is a DS RR, the next one is an RRSIG RR covering the previous DS RR
> and the rest are "support records", including RRSIG's.

Note you need to be able to accept any order of RRdata if you get the order that came in on the wire (because at least powerdns randomized the rrset)

> 
> _______________________________________________
> DNSSEC-Transparency mailing list
> DNSSEC-Transparency at lists.sunet.se
> https://lists.sunet.se/listinfo/dnssec-transparency





More information about the Users mailing list