On Fri, 21.03.14 13:05, Paul Wouters (paul(a)nohats.ca) wrote:
On Fri, 21 Mar 2014, Lennart Poettering wrote:
>As long as -lresolve (i.e. glibc and getaddrinfo()) can't do DNSSEC it's
>just not there...
You are proposing changing the api of getaddrinfo()? Could luck with
that?
Dunno, it doesn't sound too difficult to add a new flag .ai_flags that
indicates whether the dns data has been verified locally or so...
Lennart
--
Lennart Poettering, Red Hat