mirror of
https://github.com/pi-hole/dnsmasq.git
synced 2026-04-18 07:48:32 +01:00
A CNAME reply to a DNSSEC query was confusing the validation logic. It now accepts a signed CNAME reply to a DS query as proof that no DS exists at the domain. This fixes the DS/zone break detection logic.
128 KiB
128 KiB