Re: [Dnsmasq-discuss] dnsmasq treats Islands of Security as bogus

2017-04-09 Thread Simon Kelley
On 08/04/17 17:33, Patryk Szczygłowski wrote: > 2017-04-04 22:24 GMT+01:00 Simon Kelley : > >> Which version of dnsmasq are you using? I just tested this domain using >> the development code, and got the correct result. >> > > > dnsmasq - 2.73-3 > > This is the version

Re: [Dnsmasq-discuss] dnsmasq treats Islands of Security as bogus

2017-04-08 Thread Patryk Szczygłowski
2017-04-04 22:24 GMT+01:00 Simon Kelley : > Which version of dnsmasq are you using? I just tested this domain using > the development code, and got the correct result. > dnsmasq - 2.73-3 This is the version currently distributed by Turris Omnia (openwrt-based). --

Re: [Dnsmasq-discuss] dnsmasq treats Islands of Security as bogus

2017-04-04 Thread Simon Kelley
Which version of dnsmasq are you using? I just tested this domain using the development code, and got the correct result. dnsmasq: query[A] patryk.one.pl from 127.0.0.1 dnsmasq: forwarded patryk.one.pl to 8.8.4.4 dnsmasq: forwarded patryk.one.pl to 8.8.8.8 dnsmasq: dnssec-query[DS] pl to 8.8.8.8

Re: [Dnsmasq-discuss] dnsmasq treats Islands of Security as bogus

2017-03-29 Thread Patryk Szczygłowski
2017-03-27 17:38 GMT+01:00 Simon Kelley : > This is a real problem, and I plan to look at it (and all the other > stuff I've been ignoring.) ASAP. I'm moving house just now, so very > short of time. If I don't produce something by the end of next week, > please prod

Re: [Dnsmasq-discuss] dnsmasq treats Islands of Security as bogus

2017-03-27 Thread Simon Kelley
This is a real problem, and I plan to look at it (and all the other stuff I've been ignoring.) ASAP. I'm moving house just now, so very short of time. If I don't produce something by the end of next week, please prod me again. Cheers, Simon. On 27/03/17 16:37, Patryk Szczygłowski wrote: >

[Dnsmasq-discuss] dnsmasq treats Islands of Security as bogus

2017-03-27 Thread Patryk Szczygłowski
Hello, I have domain signed with DNSSEC: patryk.one.pl The issue is, the parent one.pl is completely void of DNSSEC support (and it will probably never get fixed). Therefore: - . is signed - .pl is signed, no DS for .one.pl - .one.pl is NOT signed, no DNSKEY, no DS for .patryk.one.pl -