diff --git a/CHANGELOG b/CHANGELOG index 4acc376..1999090 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,6 +1,6 @@ version 2.93 Fix a corner-case in DNSSEC validation with wildcards. If we have - a wildcard record *.example.com and recieve a query for + a wildcard record *.example.com and receive a query for a.example.com then that's OK, but we have to check that there isn't an actual a.example.com record. The corner case is when we get a query for *.example.com in that case the non-existence check @@ -19,7 +19,7 @@ version 2.93 (eg rivcoed.org) will still fail. Thanks to Petr Menšík for the bug report. - Fix DNSSEC fail with CNAME replies to DS queries. As CNAME reply + Fix DNSSEC fail with CNAME replies to DS queries. A CNAME reply to a DNSSEC query was confusing the validation logic. It now accepts a signed CNAME reply to a DS query as proof that no DS exists at the domain. This fixes the DS/zone break detection logic.