Opened 5 years ago

#72 new enhancement

Tighten CNAME validation to block cases that fail various validators

Reported by: Kris Deugau Owned by:
Priority: minor Milestone:
Version: Keywords:
Cc:

Description

Currently CNAMEs may be created in parallel with existing records. This can cause validation failures in external DNSSEC signing tools or lookup failures when the records are published.

Add checks for parallel records with options to:

  • warn and continue
  • suggest/coerce-to ALIAS (root domain only)
  • fail with error
  • remove the parallel record(s)

Change History (0)

Note: See TracTickets for help on using tickets.