bind9/lib/isc/include
Artem Boldariev b84fa122ce Make BIND refuse to serve XFRs over DoH
We cannot use DoH for zone transfers.  According to RFC8484 a DoH
request contains exactly one DNS message (see Section 6: Definition of
the "application/dns-message" Media Type,
https://datatracker.ietf.org/doc/html/rfc8484#section-6).  This makes
DoH unsuitable for zone transfers as often (and usually!) these need
more than one DNS message, especially for larger zones.

As zone transfers over DoH are not (yet) standardised, nor discussed
in RFC8484, the best thing we can do is to return "not implemented."

Technically DoH can be used to transfer small zones which fit in one
message, but that is not enough for the generic case.

Also, this commit makes the server-side DoH code ensure that no
multiple responses could be attempted to be sent over one HTTP/2
stream. In HTTP/2 one stream is mapped to one request/response
transaction. Now the write callback will be called with failure error
code in such a case.
2021-06-14 11:37:36 +03:00
..
isc Make BIND refuse to serve XFRs over DoH 2021-06-14 11:37:36 +03:00
pk11 update all copyright headers to eliminate the typo 2020-09-14 16:20:40 -07:00
pkcs11 Remove files generated by autotools 2020-04-21 14:19:30 +02:00
.clang-format Add separate .clang-format files for headers 2020-02-14 09:31:05 +01:00