Skip to content

v1.3.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Sep 16:48
· 87 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.3.3
5bc0813
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Sable 1.3.3 is a hotfix for direct recursive DNS resolution. It fixes .com
delegation failures, DNSSEC validation after cached lookups, and failover when
an authoritative nameserver stops responding.

  • Accept valid root-supplied addresses for .com nameservers under
    gtld-servers.net, fixing delegation for com. has no resolvable name servers.
    Referral addresses remain restricted to the named servers within the
    referring parent's scope.
  • Query the parent authority for DNSSEC DS records even when a previous lookup
    cached the child delegation, allowing validation to follow the correct
    chain of trust.
  • Reserve time for alternative authoritative nameservers so retries against a
    silent server cannot consume the entire resolution timeout before failover.

Existing recursive resolver configurations do not need to change. Conditional
forwarding routes and Forwarder zones continue to use their configured upstreams.

Assets 12
Loading