diff options
| author | Vladimír Čunát <vladimir.cunat@nic.cz> | 2021-05-06 18:35:04 +0200 |
|---|---|---|
| committer | Vladimír Čunát <vladimir.cunat@nic.cz> | 2021-05-10 18:36:19 +0200 |
| commit | 94963c928ef80f962e38a8dde86683a8c4772e0b (patch) | |
| tree | c5d8529494112777bffcc41b90dc2639e9ede02d /lib/resolve.h | |
| parent | lib/dnssec/ta: remove unused kr_ta_covers() function (diff) | |
| download | knot-resolver-94963c928ef80f962e38a8dde86683a8c4772e0b.tar.xz knot-resolver-94963c928ef80f962e38a8dde86683a8c4772e0b.zip | |
lib/resolve: minor improvements around kr_ta_* calls
This orphaned kr_ta_get_longest_name() so it got removed as well,
even though it's a potentially useful abstraction.
Diffstat (limited to '')
| -rw-r--r-- | lib/resolve.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/resolve.h b/lib/resolve.h index 8f2a3383..481cf6b4 100644 --- a/lib/resolve.h +++ b/lib/resolve.h @@ -108,7 +108,8 @@ enum kr_rank { /** Proven to be insecure, i.e. we have a chain of trust from TAs * that cryptographically denies the possibility of existence - * of a positive chain of trust from the TAs to the record. */ + * of a positive chain of trust from the TAs to the record. + * Or it may be covered by a closer negative TA. */ KR_RANK_INSECURE = 8, /** Authoritative data flag; the chain of authority was "verified". |