Home GnuPG
Diffusion GnuPG ebe727ef596e

dirmngr: Validate SRV records in WKD queries.

Description

dirmngr: Validate SRV records in WKD queries.

* dirmngr/server.c (proc_wkd_get): Check the returned SRV record names
to mitigate rogue DNS servers.

I am not sure wether this really is very useful because the security
relies on a trustworthy DNS system anyway. However, that check is
easy enough to do.

  • Signed-off-by: Werner Koch <wk@gnupg.org>

Details

Provenance
wernerAuthored on Jul 27 2018, 12:23 PM
Parents
rGddee9f9409fb: common: New function to validate domain names.
Branches
Unknown
Tags
Unknown