erbium
erbium copied to clipboard
dns should support dnssec
we should protect against cache poisoning by implementing dnssec, as well as protecting against information leakage by implementing RFC8198: Aggressive Use of DNSSEC-Validated Cache.