CVSROOT: /cvs
Module name: src
Changes by: flor...@cvs.openbsd.org 2024/08/09 13:43:26
Modified files:
sbin/unwind : frontend.c unwind.h
Log message:
Add 2024 root zone trust-anchor, it is expected to be used in 2026.
The trust-anchor was copied from the upcoming unbound(8) release and
verified against https://www.iana.org/reports/2024/root-ksk-2024.pdf
While here switch the 2017 trust-anchor from DNSKEY to DS to use the
same record type as for the 2024 trust-anchor. They are functionally
equivalent. It was verified against
https://www.iana.org/reports/2017/root-ksk-2017.pdf
As well as with run-time testing, i.e. unwind would still perform
DNSSEC validation.
checked pdfs & OK phessler
