New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: Add DNS cookie support #620

Open

bradh352 opened this issue Nov 15, 2023 · 0 comments

Labels

Feature Request

Member

bradh352 commented Nov 15, 2023

DNS cookies are supported by most DNS server implementations these days and can help prevent spoofing attacks. Some believe that only the ephemeral port and query id protect against this, but DNS cookies are a newer additional protection. Some reading here:
https://www.dotmagazine.online/issues/digital-responsibility-and-sustainability/dns-cookies-transaction-mechanism

It is part of RFC 9018.

As of c-ares 1.22.0 this should be fairly easy to implement as a full OPT PSEUDORECORD parser and writer exists.

bradh352 mentioned this issue

Regression with c-ares 1.21.0/1.22.0 in nodejs tests #621

Closed

bradh352 added the Feature Request label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment