diff options
Diffstat (limited to 'src/common/dns_utils.cpp')
| -rw-r--r-- | src/common/dns_utils.cpp | 24 |
1 files changed, 4 insertions, 20 deletions
diff --git a/src/common/dns_utils.cpp b/src/common/dns_utils.cpp index 40e913800..ef60a3f67 100644 --- a/src/common/dns_utils.cpp +++ b/src/common/dns_utils.cpp @@ -289,26 +289,10 @@ DNSResolver::DNSResolver() : m_data(new DNSResolverData()) add_anchors(m_data->m_ub_context); - if (!DNS_PUBLIC) - { - // if no DNS_PUBLIC specified, we try a lookup to what we know - // should be a valid DNSSEC record, and switch to known good - // DNSSEC resolvers if verification fails - bool available, valid; - static const char *probe_hostname = "updates.moneropulse.org"; - auto records = get_txt_record(probe_hostname, available, valid); - if (!valid) - { - MINFO("Failed to verify DNSSEC record from " << probe_hostname << ", falling back to TCP with well known DNSSEC resolvers"); - ub_ctx_delete(m_data->m_ub_context); - m_data->m_ub_context = ub_ctx_create(); - add_anchors(m_data->m_ub_context); - for (const auto &ip: DEFAULT_DNS_PUBLIC_ADDR) - ub_ctx_set_fwd(m_data->m_ub_context, string_copy(ip)); - ub_ctx_set_option(m_data->m_ub_context, string_copy("do-udp:"), string_copy("no")); - ub_ctx_set_option(m_data->m_ub_context, string_copy("do-tcp:"), string_copy("yes")); - } - } + // The upstream client probes a Monero-operated, DNSSEC-signed TXT record + // here and switches to hard-coded resolvers when validation fails. Monzero + // has no equivalent signed record yet, so use the operator's configured + // resolver. Clearnet bootstrap also has a compiled direct-IP fallback. } DNSResolver::~DNSResolver() |