Re: dns.c modification patch for getting TLSA RR records

Erwin Hoffmann <[email protected]> Sun, 27 May 2018 22:15:03 +0200

Newsgroups	gmane.mail.qmail.general
Message-ID	<[email protected]>

Hi,


> Am 26.05.2018 um 15:57 schrieb Manvendra Bhangui <[email protected]>:
> 
> On 26 May 2018 at 18:39, Erwin Hoffmann <[email protected]> wrote:
> 
> Apart from that: The use of TLSA records (and perhaps CAA) together with CurveDNS (given it's lookup) is certainly as 'safe' as with DNSSEC, though the RFC just require the later.
> 
> Regards.
> 
> 
> Thanks for the pointer. I will take a look at curvedns. Is it the one at http://curvedns.on2it.net/ ?

Yeah, you can find more interesting implementations here:

https://www.fehcom.de/ipnet/djbdnscurve6.html

Apart from those, I hope to finish 'dbbdnscurve6' within the next weeks:

- entire IPv6 capability.
- rbldns can be used to flag IPv6 addresses.

Regards.
--eh.

> 

Dr. Erwin Hoffmann | FEHCom | http://www.fehcom.de | PGP Key-Id 7E4034BE

signature.asc (application/pgp-signature, 833 B)