diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2017-05-07 17:49:58 +0100 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2017-05-07 18:38:35 +0100 |
| commit | 5d6bdf01a921a88030e9baec7ba5f238da90e979 (patch) | |
| tree | 56e0c1c688ccf5062d8932bb5bd60184121db006 /src | |
| parent | 58c30e4788427fe3ee1f2e058602c23f911b0d63 (diff) | |
DANE: do not trust a non-dnssec NXDOMAIN return for the TLSA lookup
Diffstat (limited to 'src')
| -rw-r--r-- | src/src/transports/smtp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/src/transports/smtp.c b/src/src/transports/smtp.c index 8f1e0bff8..9c95a4124 100644 --- a/src/src/transports/smtp.c +++ b/src/src/transports/smtp.c @@ -1209,7 +1209,7 @@ switch (rc) case DNS_NODATA: /* no TLSA RR for this lookup */ case DNS_NOMATCH: /* no records at all for this lookup */ - return dane_required ? FAIL : FAIL_FORCED; + return dane_required ? FAIL : sec ? FAIL_FORCED : DEFER; default: case DNS_FAIL: |