dnsproxy icon indicating copy to clipboard operation
dnsproxy copied to clipboard

Resolve all domains in the DNS chain

Open agneevX opened this issue 2 years ago • 1 comments

Hello.

An option should be added to dnsproxy that resolves all CNAMEs in a DNS chain, instead of just returning what the upstream server has sent.

While this will add a considerable amount of latency, it is prudent to ensure that the cache is not poisoned and is a very important feature that other recursors such as Unbound and BIND have implemented inherently.

agneevX avatar Jun 11 '22 13:06 agneevX

Tbh, I am skeptical about this one. This is recursor's job to resolve the whole chain.

ameshkov avatar Jun 20 '22 14:06 ameshkov