mirror of
				https://github.com/privacyguides/privacyguides.org.git
				synced 2025-10-31 03:26:35 +00:00 
			
		
		
		
	LibreDNS doesn't support DNSSEC
Tested with the following commands:
    $ kdig @116.202.176.26 +tls-host=dot.libredns.gr +dnssec sigfail.verteiltesysteme.net
    ;; TLS session (TLS1.3)-(ECDHE-SECP256R1)-(RSA-PSS-RSAE-SHA256)-(AES-256-GCM)
    ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 8416
    ;; Flags: qr rd ra; QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
    ;; EDNS PSEUDOSECTION:
    ;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: NOERROR
    ;; QUESTION SECTION:
    ;; sigfail.verteiltesysteme.net.		IN	A
    ;; ANSWER SECTION:
    sigfail.verteiltesysteme.net.	42	IN	A	134.91.78.139
    sigfail.verteiltesysteme.net.	42	IN	RRSIG	A 5 3 60 20210502030010 20210131030010 30665 verteiltesysteme.net. //This+RRSIG+is+deliberately+broken///For+more+information+please+go+to/http+//www+verteiltesysteme+net///////////////////////////////////////////////////////////////////8=
The status is NOERROR and the AD flags is missing but the expected
status is SERVAIL.
			
			
This commit is contained in:
		| @@ -263,7 +263,7 @@ We also log how many times this or that tracker has been blocked. We need this i | ||||
|         </td> | ||||
|         <td>No</td> | ||||
|         <td>DoH, DoT</td> | ||||
|         <td>Yes</td> | ||||
|         <td>No</td> | ||||
|         <td>Yes</td> | ||||
|         <td> | ||||
|           <span class="no-text-wrap"> | ||||
|   | ||||
		Reference in New Issue
	
	Block a user
	 Pierre-Louis Bonicoli
					Pierre-Louis Bonicoli