Re: [exim-dev] [Bug 2911] New: setting dns_again_means_nonex…

Top Page
This message is part of the following thread:
Mthe complete thread tree sorted by date
Madmin at <-
Madmin at ->
Delete this message
Reply to this message
Author: Jeremy Harris
Date:  
To: exim-dev
Old-Topics: Re: [exim-dev] [Bug 2911] New: setting dns_again_means_nonexist to a list containing @mx_ lookups causes segfault
Subject: Re: [exim-dev] [Bug 2911] New: setting dns_again_means_nonexist to a list containing @mx_ lookups causes segfault
On 23/08/2022 20:12, Viktor Dukhovni via Exim-dev wrote:
> Note that if this also potentially applies to TLSA lookups, then
> downgrading SRVFAIL (try again) to NXDOMAIN breaks the downgrade
> resistance of DANE.

Yup, it would be too easy to write a configuration that did that.
I'll add code to ignore that option for TLSA lookups.
--
Thanks,
Jeremy


This message was posted to the following mailing lists:
Exim-dev
Mailing List Info | Nearby Messages		<-[exim-dev] [Bug 2946] make max_rcpt expandable[exim-dev] [Bug 2911] setting dns_again_means_nonexist to a list containing @mx_ lookups causes segfault->
Tahini and Hummus and Cumin Development Archives administrated by cumin AdminsLurker (version 2.3)