DNSSEC Support

[medemi68]

Any idea if it would be possible to implement DNSSEC?

A.K.A DNSKEY and RRSIG

[medemi68]

If you implement this: https://github.com/techguy613/native-dns-packet/blob/master/packet.js
You should be set

[mkg20001]

@song940 When will this get implemented?

[lsongdev]

emm... sorry guys, i have no time to do this.

[ptorrent]

Hello there,

any news about that enhancement ?

[Kapsonfire-DE]

Any news... Whats needed to get this done - Funding needed?

[BasToTheMax]

Any updates?

[titanism]

This project can be used instead https://github.com/EduardoRuizM/native-dnssec-dns-packet for parsing packets - it has DNSSEC support.

[titanism]

It's been a week, and we dove deep and ran into countless similar issues (e.g. #16, #77, etc) (and other issues in general).
So after trying to use dns2 and others - we decided to roll our own.

We released 🍊 Tangerine today, which is a userland package tangerine that solves DNS caching for Node.js. It's a ⚡ faster ⚡ 1:1 drop-in replacement for dns.promises.Resolver using DNS over HTTPS ("DoH") via undici with built-in retries, timeouts, smart server rotation, AbortControllers, and caching support for multiple backends via Keyv.

npm install tangerine

-import dns from 'dns';
+import Tangerine from 'tangerine';

- const resolver = new dns.promises.Resolver();
+const resolver = new Tangerine();

Documentation, API, options, source code, tests, benchmarks, and more available at https://github.com/forwardemail/tangerine.

[gnarea]

I implemented this pure JS DNSSEC library back in 2022 and it's still maintained and used in production: https://github.com/relaycorp/dnssec-js