v0.5.0
Pre-release
Pre-release
- New custom tunneler/proxy that is more suitable for letsdane
- Negotiate a mutually supported ALPN (if available) between client and target server for DANE tunnels.
- Enable name checks for DANE-EE by default, and add flag
-skip-namechecks
to allow disabling it. - Parallel A, AAAA and TLSA lookups to minimize latency.
- Allow either ipv4 or ipv6 lookups to fail to avoid breaking some websites.
- Make logging format more consistent.
- Add back the
-pass
flag andDANE_CA_PASS
environment variable for decrypting CA file if encrypted. - Set edns to 4096 bytes in the ad resolver
- Check servfail rcode even if response is not bogus in libunbound resolver
- Add version flag
-v