Re: Implementing DANE for qmail
Manvendra Bhangui <[email protected]> Fri, 11 May 2018 08:59:23 +0530
| Newsgroups | gmane.mail.qmail.general |
|---|---|
| Message-ID | <CAOqj+1N84KWCJ=JXsyOt+U3_9_nZsYp5z7yZjdBC0=0322-WCg@mail.gmail.com> |
On 11 May 2018 at 01:54, Erwin Hoffmann <[email protected]> wrote: > Currently, Kai Peter and me building Qlibs including a DNS Stub Resolver (based on DJBDNS) included into aQmail. > While I've solved most of the IPv6 dependencies, it makes pretty little sense to include TLS support (for transportation) or even DNSSec support (for evaluation) here. > > Triggering TLSA record fetching (and verification of the received information) should be done at the stub resolve, without depending to verify the entire received information by DNSSec. > DNSCurve could do as well. > Great. Looking forward to it. Any approximate dates for release? > I'll put this point onto my agenda for aQmail using a portable solution (actually in scope for s/qmail). > Thank you. A portable solution is the need of the hour. All the libraries I have taken a look at, are horribly bloated. Also not portable because of multiple dependencies on other libraries.