probo

Files

Cursor Agent 64ef051d18 Harden DNS CAA and TXT verification

Extract shared DNS checks into dnsclient and fail closed on
truncated or non-success CAA responses. Climb past eTLD+1,
validate RFC 8659 issue-value syntax, and map NXDOMAIN TXT
lookups to the pending-verification path.

Signed-off-by: Cursor Agent <cursoragent@cursor.com>

Co-authored-by: Bryan FRIMIN <bryan@frimin.fr>

2026-07-24 23:08:36 +02:00

caa.go

Harden DNS CAA and TXT verification

2026-07-24 23:08:36 +02:00

checks_test.go

Harden DNS CAA and TXT verification

2026-07-24 23:08:36 +02:00

client.go

Harden DNS CAA and TXT verification

2026-07-24 23:08:36 +02:00

cname.go

Harden DNS CAA and TXT verification