Closed
Description
Some rdata for TLSA records, specifically cert values, are allowed that I believe should be rejected per https://datatracker.ietf.org/doc/html/rfc6698#section-2.1.
- Missing cert.
- Non-hex char "D6FCE13243AA7-". This contains a '-' that should be rejected. "D6FCE13243AAZ" was rejected correctly which contains 'Z'.
- Too long. I'm not quite sure what the max should be, but I was able to create the record using over 10k As in a row.
Metadata
Metadata
Assignees
Labels
No labels