aboutsummaryrefslogtreecommitdiff
path: root/src/common/dns_utils.cpp
diff options
context:
space:
mode:
authorMonzero Build System <builds@monzero.org>2026-08-15 21:14:26 +0100
committerMonzero Build System <builds@monzero.org>2026-08-15 21:14:26 +0100
commit28f1919249465d3230f45ed21686c5a836d56df0 (patch)
tree948fe5e7052c45c366c24a82b485ae9d1d38e39b /src/common/dns_utils.cpp
parent4f92268d7c16741cfb41e5bbe2aa46cc260a9ea5 (diff)
downloadmonzero-core-28f1919249465d3230f45ed21686c5a836d56df0.tar.gz
monzero-core-28f1919249465d3230f45ed21686c5a836d56df0.tar.xz
monzero-core-28f1919249465d3230f45ed21686c5a836d56df0.zip
Establish Monzero Phase 0 and inactive assets baselinemonzero-phase0-assets-prototype-20260815
Diffstat (limited to 'src/common/dns_utils.cpp')
-rw-r--r--src/common/dns_utils.cpp24
1 files changed, 4 insertions, 20 deletions
diff --git a/src/common/dns_utils.cpp b/src/common/dns_utils.cpp
index 40e913800..ef60a3f67 100644
--- a/src/common/dns_utils.cpp
+++ b/src/common/dns_utils.cpp
@@ -289,26 +289,10 @@ DNSResolver::DNSResolver() : m_data(new DNSResolverData())
add_anchors(m_data->m_ub_context);
- if (!DNS_PUBLIC)
- {
- // if no DNS_PUBLIC specified, we try a lookup to what we know
- // should be a valid DNSSEC record, and switch to known good
- // DNSSEC resolvers if verification fails
- bool available, valid;
- static const char *probe_hostname = "updates.moneropulse.org";
- auto records = get_txt_record(probe_hostname, available, valid);
- if (!valid)
- {
- MINFO("Failed to verify DNSSEC record from " << probe_hostname << ", falling back to TCP with well known DNSSEC resolvers");
- ub_ctx_delete(m_data->m_ub_context);
- m_data->m_ub_context = ub_ctx_create();
- add_anchors(m_data->m_ub_context);
- for (const auto &ip: DEFAULT_DNS_PUBLIC_ADDR)
- ub_ctx_set_fwd(m_data->m_ub_context, string_copy(ip));
- ub_ctx_set_option(m_data->m_ub_context, string_copy("do-udp:"), string_copy("no"));
- ub_ctx_set_option(m_data->m_ub_context, string_copy("do-tcp:"), string_copy("yes"));
- }
- }
+ // The upstream client probes a Monero-operated, DNSSEC-signed TXT record
+ // here and switches to hard-coded resolvers when validation fails. Monzero
+ // has no equivalent signed record yet, so use the operator's configured
+ // resolver. Clearnet bootstrap also has a compiled direct-IP fallback.
}
DNSResolver::~DNSResolver()