Opened 5 years ago
#72 new enhancement
Tighten CNAME validation to block cases that fail various validators
Reported by: | Kris Deugau | Owned by: | |
---|---|---|---|
Priority: | minor | Milestone: | |
Version: | Keywords: | ||
Cc: |
Description
Currently CNAMEs may be created in parallel with existing records. This can cause validation failures in external DNSSEC signing tools or lookup failures when the records are published.
Add checks for parallel records with options to:
- warn and continue
- suggest/coerce-to ALIAS (root domain only)
- fail with error
- remove the parallel record(s)
Note:
See TracTickets
for help on using tickets.