Cursor Agent 64ef051d18 Harden DNS CAA and TXT verification ...

Extract shared DNS checks into dnsclient and fail closed on
truncated or non-success CAA responses. Climb past eTLD+1,
validate RFC 8659 issue-value syntax, and map NXDOMAIN TXT
lookups to the pending-verification path.

Signed-off-by: Cursor Agent <cursoragent@cursor.com>

Co-authored-by: Bryan FRIMIN <bryan@frimin.fr>

2026-07-24 23:08:36 +02:00

1.6 KiB

Raw Blame History

View Raw