[DNSSEC-Transparency] Status 2016-04-08

Robert Edmonds <edmonds at mycre.ws> wrote Mon, 11 Apr 2016 15:07:30 -0400: | There is already a flexible binary logging facility implemented in | multiple DNS resolvers: http://dnstap.info/. I think at least BIND, | Unbound, and Knot Resolver already have support in their mainline That's interesting for at least one of the cases. Thanks! | It's not particularly well documented how to do these kinds of | extensions to dnstap, but if you can pinpoint where exactly in e.g. the | Unbound code you would want to capture the DS record data (and any | needed metadata?) I can help with making the necessary modifications. Thanks for the offer! I will wait a bit in the hope that someone working on the client side pick this up.