Wez Furlong 3e549a9fcb dns: derive DNSSEC status for hickory negative answers ...

The hickory backend hardcoded the secure and bogus flags to false for
NODATA/NXDOMAIN responses, discarding the DNSSEC proof that hickory does
deliver. A securely denied answer carries validated authority records
(SOA/NSEC/RRSIG) proving the absence; derive secure and bogus from those
the same way we already do for the answer section of a positive response.

This closes a divergence from the unbound backend: a securely proven "no
MX" (common for signed domains that publish no MX) now marks the implicit
MX secure so DANE can engage, and a tampered denial can surface as bogus
and defer rather than silently reporting not-applicable.

2026-07-06 16:19:16 +01:00

..

bounce-classify

smtp_dispatcher: handle pathologic all-452 case

2025-11-07 08:13:36 +00:00

cidr-map

prohibited_hosts: add v4 and v6 any address

2025-11-10 15:09:11 +00:00

config

introduce declare_metric! macro

2026-02-04 09:10:25 +00:00

data-loader

data-loader: improve error message for file read error case

2025-10-24 21:22:14 +01:00

dkim

enrich props for dkim and dmarc

2026-05-06 13:29:15 +00:00

dns-resolver

dns: derive DNSSEC status for hickory negative answers

2026-07-06 16:19:16 +01:00

domain-map

deps: upgrade mlua to 0.10

2024-12-07 09:17:54 -07:00

duration-serde

cargo clippy --fix

2025-04-09 10:26:07 -07:00

integration-tests

dane: engage for secure CNAME into unsigned zone

2026-07-06 11:46:51 +01:00

jsonschematodocs

add auto-gen docs for proxy-server http api and metrics

2026-02-06 07:11:56 +00:00

kcli

track sched->readyq fan in, clean up some internals

2026-06-25 13:41:01 +01:00

kumo-address

deps: hickory 0.25 -> 0.26

2026-06-23 15:47:08 +01:00

kumo-api-client

add resolve-egress-path API endpoint

2026-06-23 10:00:05 +01:00

kumo-api-types

new allow_smtp_auth_plain_without_valid_certificate option

2026-07-06 11:46:50 +01:00

kumo-chrono-helper

rustfmt

2026-03-02 15:42:27 +00:00

kumo-counter-series

introduce kumo-counter-series crate

2026-03-31 11:30:28 +01:00

kumo-dmarc

psl: normalize domains before psl::domain_str / suffix_str lookups

2026-05-06 13:34:15 +00:00

kumo-jsonl

kumo-jsonl: make tailer more tolerant of errors

2026-05-29 08:57:47 +01:00

kumo-log-types

fix: DANE downgrade resistance

2026-07-06 11:46:49 +01:00

kumo-machine-info

introduce kumo-machine-info crate

2026-02-24 12:19:53 +00:00

kumo-prometheus

kumo-prometheus: re-export Map type for convenience

2026-02-24 12:19:54 +00:00

kumo-server-common

track sched->readyq fan in, clean up some internals

2026-06-25 13:41:01 +01:00

kumo-server-lifecycle

lifecycle: fix error propgation from kumo.on('main')

2026-04-09 15:42:39 +01:00

kumo-server-memory

docs: flesh out docs for a number of metrics

2026-02-04 11:45:11 +00:00

kumo-server-runtime

Start of DMARC reporting

2026-04-29 08:07:55 +01:00

kumo-spf

deps: hickory 0.25 -> 0.26

2026-06-23 15:47:08 +01:00

kumo-template

kumo-template: fixup deprecated call

2026-03-28 07:20:33 +00:00

kumo-tls-helper

deps: hickory 0.25 -> 0.26

2026-06-23 15:47:08 +01:00

kumo-wrap

kumo-wrap: fixup handling of trailing whitespace

2026-03-28 07:20:33 +00:00

kumod

dane: engage for secure CNAME into unsigned zone

2026-07-06 11:46:51 +01:00

lruttl

lruttl: add consistency/robustness check

2026-03-11 15:19:23 +00:00

maildir

SharedString: remove deref to str, deal with fanout

2026-03-28 07:20:27 +00:00

mailparsing

fix regression in serializing original_message in ARF

2026-05-29 09:45:22 +01:00

message

rustfmt

2026-06-23 09:24:25 +01:00

mod-amqp

cargo clippy --fix

2025-04-09 10:26:07 -07:00

mod-aws-sigv4

fix(mod-aws-sigv4): apply Trimall, require host header, fix S3 content-sha256

2026-05-29 10:16:06 +01:00

mod-counter-series

rustfmt

2026-05-12 16:50:01 +01:00

mod-crypto

implement aes-cbc block with examples

2025-10-22 11:55:16 +01:00

mod-digest

kumo.digest: add various HMAC_SHAXXX functions

2025-11-13 12:06:32 +00:00

mod-dns-resolver

dns: add RFC 5011 managed trust anchor option for unbound

2026-07-06 11:46:51 +01:00

mod-encode

new: kumo.encode.charset_decode/kumo.encode.charset_encode

2026-03-28 07:20:34 +00:00

mod-file-type

add new kumo.file_type module

2025-10-07 12:12:46 +01:00

mod-filesystem

Adding kumo.fs.stat to get file/dir meta data (#497)

2026-04-04 19:52:12 +01:00

mod-http

mod-http: allow disabling certificate verification on the client

2026-05-07 14:18:09 +01:00

mod-kafka

deps: update rdkafka

2025-10-08 11:00:37 +01:00

mod-memoize

lruttl: add consistency/robustness check

2026-03-11 15:19:23 +00:00

mod-mimepart

fix regression in serializing original_message in ARF

2026-05-29 09:45:22 +01:00

mod-mpsc

mpsc: provide shutdown event and clarify single-consumer parts

2025-07-29 15:22:51 +01:00

mod-nats

mod_nats: integrate nats

2026-02-24 11:03:43 +00:00

mod-redis

docs: update since('dev') macros for stable release

2026-03-04 08:03:21 +00:00

mod-regex

more clippy

2025-04-09 10:26:12 -07:00

mod-serde

rustfmt

2026-06-23 09:59:34 +01:00

mod-smtp-response-normalize

normalizer: add {duration} placeholders

2026-04-07 10:05:56 +01:00

mod-sqlite

cargo clippy --fix

2025-04-09 10:26:07 -07:00

mod-string

psl: normalize domains before psl::domain_str / suffix_str lookups

2026-05-06 13:34:15 +00:00

mod-time

Adding kumo.fs.stat to get file/dir meta data (#497)

2026-04-04 19:52:12 +01:00

mod-uuid

deps: upgrade mlua to 0.10

2024-12-07 09:17:54 -07:00

mta-sts

deps: hickory 0.25 -> 0.26

2026-06-23 15:47:08 +01:00

nom-utils

deps: hickory 0.25 -> 0.26

2026-06-23 15:47:08 +01:00

proxy-server

proxy: keepalive will work on macos and other unix too

2026-05-06 22:38:50 +01:00

psl-utils

psl: normalize domains before psl::domain_str / suffix_str lookups

2026-05-06 13:34:15 +00:00

regex-set-map

cargo clippy --fix

2025-04-09 10:26:07 -07:00

rfc5321

fix: DANE downgrade resistance

2026-07-06 11:46:49 +01:00

run-lua-tests

server-common: try to be more faithful when logging bytes

2026-03-28 07:20:34 +00:00

spool

rustfmt

2026-06-23 09:24:25 +01:00

spool-util

Remove unused dependencies

2024-11-13 13:50:27 -07:00

summarize-memory

summarize-memory: clippy suggestion

2025-04-09 10:26:11 -07:00

tailer

tailer: fixup checkpoint name, default batch size

2026-04-07 13:52:19 +01:00

throttle

rustfmt

2026-06-23 09:59:34 +01:00

timeq

docs: flesh out docs for a number of metrics

2026-02-04 11:45:11 +00:00

tls-probe

Adding support for presenting Client cert as part of make_egress_path (#391)

2025-07-24 13:00:27 +01:00

toml2jsonc

cargo clippy --fix

2025-04-09 10:26:07 -07:00

traffic-gen

rfc5321: change protocol parser from pest -> nom

2026-04-08 14:12:58 +01:00

tsa-daemon

rfc5321: change protocol parser from pest -> nom

2026-04-08 14:12:58 +01:00

uuid-helper

cargo clippy --fix

2025-04-09 10:26:07 -07:00

validate-bounces

Manage all external dependencies at the workspace level

2024-11-13 13:50:27 -07:00

validate-shaping

shaping: add timeout for tsa shaping data fetches

2025-03-18 14:05:30 -07:00

version-info

version-info: allow embedding into another project

2026-02-09 07:59:10 +00:00