mirror of
https://github.com/isc-projects/bind9.git
synced 2026-05-25 19:02:12 -04:00
DNSSEC wildcard negative proof responses were longer than necessary in some cases; the existence of a node for which the qname is a subdomain obscures all shallower wildcards. That is, query for y.x.foo.com. If the response contains an NXT at x.foo.com, it's not necessary to prove that there's no wildcard at *.foo.com, since it wouldn't be matched anyway. |
||
|---|---|---|
| .. | ||
| check | ||
| dig | ||
| dnssec | ||
| named | ||
| nsupdate | ||
| rndc | ||
| tests | ||
| win32/BINDInstall | ||
| .cvsignore | ||
| Makefile.in | ||