lib/iterate: do not follow CNAME targets outside cut
this is a problem when both CNAME and the target are answered from the same NS (but different authority), but only the CNAME authority does DNSSEC. it’s probably legal, but it’s pretty stupid to do so
Loading
Please register or sign in to comment