Skip to content

Conversation

@rithvikvibhu
Copy link

Closes #35 and maybe even #28 (for second part, doesn't check cd).

Changes:

Also fixes tests (I can split it into a separate PR if needed):

  • proof-test.js: iis.se is no longer weak, changed to false
  • stub-test.js: mail.google.com doesn't have a CNAME, so replaced it with onedrive.live.com
  • KSK 2010 -> KSK 2017 in tests
  • Updates root.zone in test/data/ with latest from https://www.internic.net/domain/root.zone
  • Updates test data for com.
  • Updates tests with new sizes, etc.

Comment on lines +146 to +147
if (res.code === codes.SERVFAIL) {
rc.bogus = true;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What's the reason for setting bogus here? SERVFAIL doesn't necessarily mean bogus it could happen for many many reasons. It seems that the code path throws anyway if response code is something other than NOERROR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Return SERVFAIL when dnssec fails to validate

2 participants