AdGuardHome icon indicating copy to clipboard operation
AdGuardHome copied to clipboard

Responses for which the DNSSEC validation had explicitly been omitted aren't cached now

Open Bitcion opened this issue 3 years ago • 0 comments

Prerequisites

  • [X] I have checked the Wiki and Discussions and found no answer

  • [X] I have searched other issues and found no duplicates

  • [X] I want to report a bug and not ask a question

Operating system type

Linux, OpenWrt

CPU architecture

32-bit MIPS LE

Installation

Other (please mention in the description)

Setup

On one machine

AdGuard Home version

0.108.0

Description

当我加入不支持的dnssec的dns,与其他支持的(doh dol)一起使用时,所有dnssec的验证都失效。

从字面理解,这个功能应该是:支持与不支持的上游的dns并行查询,并舍弃不支持的缓存,保留支持的缓存。

目前来看这功能存在两个bug: 1、并行查询不会保留有验证的缓存 2、安全与不安全dns一起使用时会导致没有dnssec验证

Bitcion avatar Oct 24 '22 18:10 Bitcion