DnsServer
DnsServer copied to clipboard
Implement support for DNSSEC algorithms ED25519 and ED448
This was bought up during a discussion on the IPv6 discord server. It was bought up that apparently Technitium is lacking as a validating recursive resolver due to cryptographic algorithm support, so I looked into it and decided to file a issue here.
Technitium DNS appears to be lacking support for the newer DNSKEY algorithms. Specifically, ed25519 and ed448 which of which the former is recommended for signing support and the latter is recommended for validation support, as per RFC8624, section 3.1
References: https://ed25519.no/ https://datatracker.ietf.org/doc/html/rfc8624#section-3.1
Thanks for the post. These algorithms are planned but not available as they are not yet supported by .NET runtime since the algorithms are not natively available on some OS.
Of course it's microsoft. And it's been open since 2015 ffs.