Daniel Stirnimann

Some rrsigs are not removed by dnssec-signzone when re-signing a zone (bug 4305). This fixes issue #54

dnssec-signzone from BIND 9.10.3-P4 or BIND 9.9.8-P4 and earlier have a bug which does not remove unnecessary rrsigs from zone. It is fixed for upcoming releases: > 1. [bug] dnssec-signzone...

NSEC3 iterations

2

Test [DNSSEC03](https://github.com/zonemaster/zonemaster/blob/master/docs/specifications/tests/DNSSEC-TP/dnssec03.md) checks for the NSEC3 iterations. I recommend to revisit the threshold values of this test. The currently discussed IETF [draft-hardaker-dnsop-nsec3-guidance-03](https://datatracker.ietf.org/doc/html/draft-hardaker-dnsop-nsec3-guidance-03) suggests that everything above 150 iterations is an...

Add config setting which preserves host header

3

Should implement feature request #29

This pull requests: - adds new targets - removes obsolete `db.doh-redirect` file - there is no need to have both a `db.doh` and `db.doh-redirect` file with a different policy. One...

requires knot < 2.4.0

2

build fails with libknot.so.5 (knot >= 2.4.0) dns.lua, dns/utils.lua expects libknot.so {2,3,4} which is knot < 2.4.0 I believe. If I change the source to include libknot.so.5 ```make check``` fails...

It would be useful if the UI would allow the user to select one or more EDNS option for the query. The response output already decodes multiple EDNS options, so...