mirror of
https://github.com/pi-hole/dnsmasq.git
synced 2026-02-15 07:25:42 +00:00
A CNAME reply to a DNSSEC query was confusing the validation logic. It now accepts a signed CNAME reply to a DS query as proof that no DS exists at the domain. This fixes the DS/zone break detection logic.
128 KiB
128 KiB