[Bug network/20358] RES_USE_DNSSEC sets DO; should also have a way to set AD

["cvs-commit at gcc dot gnu.org" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=20358

--- Comment #3 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
The master branch has been updated by Florian Weimer <fw@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=446997ff1433d33452b81dfa9e626b8dccf101a4

commit 446997ff1433d33452b81dfa9e626b8dccf101a4
Author: Florian Weimer <fweimer@redhat.com>
Date:   Wed Oct 30 17:26:58 2019 +0100

    resolv: Implement trust-ad option for /etc/resolv.conf [BZ #20358]

    This introduces a concept of trusted name servers, for which the
    AD bit is passed through to applications.  For untrusted name
    servers (the default), the AD bit in responses are cleared, to
    provide a safe default.

    This approach is very similar to the one suggested by Pavel Šimerda
    in <https://bugzilla.redhat.com/show_bug.cgi?id=1164339#c15>.

    The DNS test framework in support/ is enhanced with support for
    setting the AD bit in responses.

    Tested on x86_64-linux-gnu.

    Change-Id: Ibfe0f7c73ea221c35979842c5c3b6ed486495ccc

-- 
You are receiving this mail because:
You are on the CC list for the bug.