On Fri, 21.03.14 13:05, Paul Wouters (paul@xxxxxxxxx) wrote: > On Fri, 21 Mar 2014, Lennart Poettering wrote: > > >As long as -lresolve (i.e. glibc and getaddrinfo()) can't do DNSSEC it's > >just not there... > > You are proposing changing the api of getaddrinfo()? Could luck with > that? Dunno, it doesn't sound too difficult to add a new flag .ai_flags that indicates whether the dns data has been verified locally or so... Lennart -- Lennart Poettering, Red Hat -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct