update DNSSEC TODO

2015-12-29 21:42:10 +01:00
parent 6af47493de
commit 0a9a2ac3d3
1 changed files with 2 additions and 1 deletions
@@ -42,7 +42,8 @@
 *   - per-interface DNSSEC setting
 *   - nxdomain on qname
 *   - retry on failed validation?
- *   - DSA support?
+ *   - DNSSEC key revocation support? https://tools.ietf.org/html/rfc5011
+ *   - when doing negative caching, use NSEC/NSEC3 RR instead of SOA for TTL
 *
 * */