[PR #2313] [MERGED] NSEC3 validation #2942

New issue

Closed

opened 2026-03-16 11:16:36 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 11:16:36 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/hickory-dns/hickory-dns/pull/2313
Author: @listochkin
Created: 7/16/2024
Status: ✅ Merged
Merged: 9/10/2024
Merged by: @listochkin

Base: main ← Head: al-nsec3-validation

📝 Commits (4)

b5132fb NSEC3 validation: hashing parameter checks
4f88f3a module docs explaining NSEC3 terminology
5afb4fb NSEC3 Validation for NXDomain responses
950ea61 NSEC3 Validation for "No data" responses

📊 Changes

3 files changed (+776 additions, -4 deletions)

View changed files

📝 crates/proto/src/xfer/dnssec_dns_handle/mod.rs (+38 -4)
➕ crates/proto/src/xfer/dnssec_dns_handle/nsec3_validation.rs (+687 -0)
📝 tests/integration-tests/tests/client_tests.rs (+51 -0)

📄 Description

Adds support for NSEC3 records validation for the resolver

non-direct enclosers
wildcard enclosers
support NO_DATA responses

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/hickory-dns/hickory-dns/pull/2313 **Author:** [@listochkin](https://github.com/listochkin) **Created:** 7/16/2024 **Status:** ✅ Merged **Merged:** 9/10/2024 **Merged by:** [@listochkin](https://github.com/listochkin) **Base:** `main` ← **Head:** `al-nsec3-validation` --- ### 📝 Commits (4) - [`b5132fb`](https://github.com/hickory-dns/hickory-dns/commit/b5132fbeb2ab8d69356eda295655cb2602f28094) NSEC3 validation: hashing parameter checks - [`4f88f3a`](https://github.com/hickory-dns/hickory-dns/commit/4f88f3a81a1ba81448c1b14d2f05fe26bb72fda5) module docs explaining NSEC3 terminology - [`5afb4fb`](https://github.com/hickory-dns/hickory-dns/commit/5afb4fb722e0414e7850981e45e7f195873664c5) NSEC3 Validation for NXDomain responses - [`950ea61`](https://github.com/hickory-dns/hickory-dns/commit/950ea61f85dcc3b49f1a2817c9d48359fc075a8a) NSEC3 Validation for "No data" responses ### 📊 Changes **3 files changed** (+776 additions, -4 deletions) <details> <summary>View changed files</summary> 📝 `crates/proto/src/xfer/dnssec_dns_handle/mod.rs` (+38 -4) ➕ `crates/proto/src/xfer/dnssec_dns_handle/nsec3_validation.rs` (+687 -0) 📝 `tests/integration-tests/tests/client_tests.rs` (+51 -0) </details> ### 📄 Description Adds support for NSEC3 records validation for the resolver * [x] non-direct enclosers * [x] wildcard enclosers * [x] support NO_DATA responses --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>