a16e01e1d4
feat: add 6 new delegation rules for deeper validation
...
Add rules for duplicate NS detection, cross-parent NS/DS consistency,
and DNSKEY integrity (KSK presence, protocol field, full KSK coverage by DS).
2026-05-16 17:03:26 +08:00
557bed4330
test: extend rule coverage to all 20 rules and edge cases
2026-05-16 13:26:06 +08:00
3366cebf7d
refactor: always probe DNSKEY regardless of parent DS presence
...
Move the "skip DNSKEY when no parent DS" decision out of Collect and
into the rules, so the prober stays a pure observer. The dnskeyQueryRule
and dnskeyMatchesDSRule already return StatusUnknown when no parent DS
is present.
2026-05-16 13:18:30 +08:00
7e8faa7169
refactor: deduplicate primary parent view selection in Collect
...
Replace the inline loop with a call to the existing primaryParentView()
helper so the selection algorithm lives in exactly one place.
2026-05-16 13:14:08 +08:00
7e0f29075e
Initial commit
2026-04-26 19:46:01 +07:00
