[Dnssec-trigger] dnssec-trigger-script patches

Paul Wouters paul at nohats.ca
Wed May 7 15:25:38 UTC 2014


On Wed, 7 May 2014, Pavel Simerda wrote:

>>> Thanks, applied.  Does this finish up the items you wanted to do, or
>>> are you still working your way through the bugzilla list?
>>
>> Hi Wouter,
>>
>> There's one item that I would like to solve soon and that's basically
>> described in bugzilla comment:
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=1089910#c6
>>
>> It could look like:
>>
>> flush_global_zone=yes|negative-only|no
>>
>> Any suggestions regarding the name of the option and of negative-only value?
>> That
>> would be the last thing for the release. Or, if we are in hurry, we can leave
>> it
>> for the next release.
>
> There's no consensus on this, yet, so we can keep the current implementation for
> now.

While not everyone might want to use the feature, I think there is
consensus that it does no harm for those who want it? There are clear
privacy advantages to not flushing your entire cache upon every network
switch.

Paul



More information about the dnssec-trigger mailing list