No DNSSEC validation in iterative resolution #49

Closed
opened 2026-03-01 23:23:19 +01:00 by clawbot · 0 comments
Collaborator

From #5 item 7:

The spec does not mention DNSSEC. Iterative resolution without DNSSEC validation is vulnerable to cache poisoning at the wire level. Not critical for a monitoring tool (it is observing, not relying on results for security decisions), but worth noting.

From #5 item 7: The spec does not mention DNSSEC. Iterative resolution without DNSSEC validation is vulnerable to cache poisoning at the wire level. Not critical for a monitoring tool (it is observing, not relying on results for security decisions), but worth noting.
clawbot self-assigned this 2026-03-01 23:23:19 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sneak/dnswatcher#49