DNSSEC support#572

Draft

tobixen wants to merge 11 commits intomasterfrom

Commits on Nov 27, 2025

Add RFC 6764 DNS-based service discovery for CalDAV/CardDAV

tobixen
and
claude
committed
Preserve username from email address in RFC6764 discovery

tobixen
and
claude
committed
moved the AI-generated example file, made a new example that shows well-known URLs
tobixen
committed
Enable RFC6764 discovery from username parameter

tobixen
and
claude
committed
tweaks, tests now runs the rfc6764 discovery
tobixen
committed
this example should not depend on conf_private.py to exist
tobixen
committed
Add security mitigations for RFC6764 DNS-based discovery

tobixen
and
claude
committed
Add optional DNSSEC validation for RFC 6764 discovery

tobixen
and
claude
committed
Fix DNSSEC validation bypass when falling back to well-known URI

tobixen
and
claude
committed
Document DNSSEC limitations for well-known URI discovery

tobixen
and
claude
committed
Enable DNSSEC for ALL DNS lookups using niquests DoH resolver

tobixen
and
claude
committed