AdGuardHome
AdGuardHome copied to clipboard
Responses for which the DNSSEC validation had explicitly been omitted aren't cached now
Prerequisites
-
[X] I have checked the Wiki and Discussions and found no answer
-
[X] I have searched other issues and found no duplicates
-
[X] I want to report a bug and not ask a question
Operating system type
Linux, OpenWrt
CPU architecture
32-bit MIPS LE
Installation
Other (please mention in the description)
Setup
On one machine
AdGuard Home version
0.108.0
Description
当我加入不支持的dnssec的dns,与其他支持的(doh dol)一起使用时,所有dnssec的验证都失效。
从字面理解,这个功能应该是:支持与不支持的上游的dns并行查询,并舍弃不支持的缓存,保留支持的缓存。
目前来看这功能存在两个bug: 1、并行查询不会保留有验证的缓存 2、安全与不安全dns一起使用时会导致没有dnssec验证