Security/DNSSEC-TLS-details: Difference between revisions

Line 130: Line 130:
== Test Plans ==
== Test Plans ==


Current test plans (yet to be fully realized) include fuzzing the added attack surface (i.e. throwing data blobs at the validator) as well as deliberately crafted DNSSEC chains (e.g. ones with expired signatures, missing links, invalid links, etc.)
Current test plans include fuzzing the added attack surface (i.e. throwing data blobs at the validator) as well as deliberately crafted DNSSEC chains (e.g. ones with expired signatures, missing links, invalid links, etc.) Additionally, the library is being run through [http://klee.llvm.org/ KLEE] to check for memory safety errors.


== nginx and openssl ==
== nginx and openssl ==
Confirmed users
299

edits