resolved: maintain a short TODO list for DNSSEC support in the dnssec C files for now
authorLennart Poettering <lennart@poettering.net>
Thu, 3 Dec 2015 18:53:13 +0000 (19:53 +0100)
committerLennart Poettering <lennart@poettering.net>
Thu, 3 Dec 2015 20:17:49 +0000 (21:17 +0100)
src/resolve/resolved-dns-dnssec.c

index bd3d2f5..a82265a 100644 (file)
  * How does the DNSSEC canonical form of a hostname with a label
  * containing a dot look like, the way DNS-SD does it?
  *
+ * TODO:
+ *
+ *   - Iterative validation
+ *   - NSEC proof of non-existance
+ *   - NSEC3 proof of non-existance
+ *   - Trust anchor store
+ *   - wildcard zones
+ *   - multi-label zones
+ *   - cname support
+ *   - DNSSEC bus API extensions
+ *   - global + per-interface DNSSEC setting
+ *   - DSA support
+ *   - EC support?
+ *
  * */
 
 #define VERIFY_RRS_MAX 256